Merge branch '5.3' into 5.4

javiereguiluz · javiereguiluz · commit d8d53a71169a · 2021-12-22T17:30:11.000+01:00
* 5.3:
  [Security] Add PHP attributes to a PHP annotations example
diff --git a/security.rst b/security.rst
@@ -2199,30 +2199,55 @@ will happen:
 Thanks to the SensioFrameworkExtraBundle, you can also secure your controller
 using annotations:
 
-.. code-block:: diff
+.. configuration-block::
 
-      // src/Controller/AdminController.php
-      // ...
+    .. code-block:: php-annotations
 
-    + use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
+        // src/Controller/AdminController.php
+        // ...
 
-    + /**
-    +  * Require ROLE_ADMIN for *every* controller method in this class.
-    +  *
-    +  * @IsGranted("ROLE_ADMIN")
-    +  */
-      class AdminController extends AbstractController
-      {
-    +     /**
-    +      * Require ROLE_ADMIN for only this controller method.
-    +      *
-    +      * @IsGranted("ROLE_ADMIN")
-    +      */
-          public function adminDashboard(): Response
-          {
-              // ...
-          }
-      }
+        use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
+
+        /**
+         * Require ROLE_ADMIN for all the actions of this controller
+         *
+         * @IsGranted("ROLE_ADMIN")
+         */
+        class AdminController extends AbstractController
+        {
+            /**
+             * Require ROLE_SUPER_ADMIN only for this action
+             *
+             * @IsGranted("ROLE_SUPER_ADMIN")
+             */
+            public function adminDashboard(): Response
+            {
+                // ...
+            }
+        }
+
+    .. code-block:: php-attributes
+
+        // src/Controller/AdminController.php
+        // ...
+
+        use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
+
+        /**
+         * Require ROLE_ADMIN for all the actions of this controller
+         */
+        #[IsGranted('ROLE_ADMIN')]
+        class AdminController extends AbstractController
+        {
+            /**
+             * Require ROLE_SUPER_ADMIN only for this action
+             */
+            #[IsGranted('ROLE_SUPER_ADMIN')]
+            public function adminDashboard(): Response
+            {
+                // ...
+            }
+        }
 
 For more information, see the `FrameworkExtraBundle documentation`_.
 
