Skip to content

Ambiguity on Access Decision Manager's Strategy #5912

Closed
@thedamnedrhino

Description

@thedamnedrhino

There currently two articles concerning the AcessDecisionManager's Strategy, the one from the Security Component and the One from the Cookbook. Reading the description of the _affirmative_ strategy, I noticed that these two don't match. The one from the Security Component states:

grant access as soon as any voter returns an affirmative response.

which means make the decision as soon as any voter _grants_ OR _denies_ access.
But according to the one from the cookbook:

This grants access as soon as there is one voter granting access.

Which is self explanatory but is in contradiction with the former description of this strategy.
I have found this latter description to be Correct.

Metadata

Metadata

Assignees

No one assigned

    Labels

    SecurityactionableClear and specific issues ready for anyone to take them.good first issueIdeal for your first contribution! (some Symfony experience may be required)hasPRA Pull Request has already been submitted for this issue.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions