Commit9001f9e

committed

[Security] Expose the required roles in AccessDeniedException

1 parentf146f84 commit9001f9eCopy full SHA for 9001f9e

File tree

+44

-2

lines changed

+44

-2

lines changed

Lines changed: 35 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -18,8 +18,43 @@`
`18`	`18`	`*/`
`19`	`19`	`class AccessDeniedExceptionextends \RuntimeException`
`20`	`20`	`{`
	`21`	`+private$attributes = [];`
	`22`	`+private$object;`
	`23`	`+`
`21`	`24`	`publicfunction__construct($message ='Access Denied.',\Exception$previous =null)`
`22`	`25`	`{`
`23`	`26`	`parent::__construct($message,403,$previous);`
`24`	`27`	`}`
	`28`	`+`
	`29`	`+/**`
	`30`	`+ * @return array`
	`31`	`+ */`
	`32`	`+publicfunctiongetAttributes()`
	`33`	`+ {`
	`34`	`+return$this->attributes;`
	`35`	`+ }`
	`36`	`+`
	`37`	`+/**`
	`38`	`+ * @param array $attributes`
	`39`	`+ */`
	`40`	`+publicfunctionsetAttributes(array$attributes)`
	`41`	`+ {`
	`42`	`+$this->attributes =$attributes;`
	`43`	`+ }`
	`44`	`+`
	`45`	`+/**`
	`46`	`+ * @return mixed`
	`47`	`+ */`
	`48`	`+publicfunctiongetObject()`
	`49`	`+ {`
	`50`	`+return$this->object;`
	`51`	`+ }`
	`52`	`+`
	`53`	`+/**`
	`54`	`+ * @param mixed $object`
	`55`	`+ */`
	`56`	`+publicfunctionsetObject($object)`
	`57`	`+ {`
	`58`	`+$this->object =$object;`
	`59`	`+ }`
`25`	`60`	`}`

Lines changed: 5 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -67,7 +67,11 @@ public function handle(GetResponseEvent $event)`
`67`	`67`	`}`
`68`	`68`
`69`	`69`	`if (!$this->accessDecisionManager->decide($token,$attributes,$request)) {`
`70`		`-thrownewAccessDeniedException();`
	`70`	`+$exception =newAccessDeniedException();`
	`71`	`+$exception->setAttributes($attributes);`
	`72`	`+$exception->setObject($request);`
	`73`	`+`
	`74`	`+throw$exception;`
`71`	`75`	`}`
`72`	`76`	`}`
`73`	`77`	`}`

Lines changed: 4 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -122,7 +122,10 @@ private function attemptSwitchUser(Request $request)`
`122`	`122`	`}`
`123`	`123`
`124`	`124`	`if (false ===$this->accessDecisionManager->decide($token,array($this->role))) {`
`125`		`-thrownewAccessDeniedException();`
	`125`	`+$exception =newAccessDeniedException();`
	`126`	`+$exception->setAttributes(array($this->role));`
	`127`	`+`
	`128`	`+throw$exception;`
`126`	`129`	`}`
`127`	`130`
`128`	`131`	`$username =$request->get($this->usernameParameter);`

Comments

(0)