Added a small note about dynamic role hierarchies

javiereguiluz · javiereguiluz · commit 5230e5667d4e · 2018-06-28T09:05:38.000+02:00
diff --git a/security.rst b/security.rst
@@ -1254,6 +1254,13 @@ In the above configuration, users with ``ROLE_ADMIN`` role will also have the
 ``ROLE_USER`` role. The ``ROLE_SUPER_ADMIN`` role has ``ROLE_ADMIN``, ``ROLE_ALLOWED_TO_SWITCH``
 and ``ROLE_USER`` (inherited from ``ROLE_ADMIN``).
 
+.. note::
+
+    The value of the ``role_hierarchy`` option is defined statically, so you
+    can't for example store the role hierarchy in a database. If you need that,
+    create a custom :doc:`security voter </security/voters>` that looks for the
+    user roles in the database.
+
 Final Words
 -----------
 
