denyAccessUnlessGranted in controller multiple roles

Question

I found this controller method that helps filtering access with a role name :

$this->denyAccessUnlessGranted('ROLE_EDIT', $item, 'You cannot edit this item.');

Is it possible to use the same method with multiple roles. I tried something like this but it doesnt seems to work :

$this->denyAccessUnlessGranted(array('ROLE_EDIT', 'ROLE_WHATEVER'), $item, 'You cannot edit this item.');

what you want to express ? are both roles neccessary or one of both ? — john Smith

john Smith john Smith · Accepted Answer · 2016-01-12T16:37:48

looking into the method shows how it works

protected function denyAccessUnlessGranted($attributes, $object = null, $message = 'Access Denied.')
{
    if (!$this->isGranted($attributes, $object)) {
        throw $this->createAccessDeniedException($message);
    }
}

so you could easily adapt this to your case

in your controller sth. like:

if(!$this->isGranted('ROLE_EDIT', $item) && !$this->isGranted('ROLE_OTHER', $item)){
    throw $this->createAccessDeniedException('not allowed');
}

denyAccessUnlessGranted in controller multiple roles

2 Answers