@@ -762,13 +762,13 @@ is used to enforce access.
762762Each ``access_control `` has several options that configure two different
763763things:
764764
765- *:ref: `should the incoming request match this access control entry<security-book-access-control-matching-options> `
766- *:ref: `once it matches, should some sort of access restriction be enforced<security-book-access-control-enforcement-options> `:
765+ *(a) :ref: `should the incoming request match this access control entry<security-book-access-control-matching-options> `
766+ *(b) :ref: `once it matches, should some sort of access restriction be enforced<security-book-access-control-enforcement-options> `:
767767
768768.. _security-book-access-control-matching-options :
769769
770- Matching Options
771- ................
770+ (a) Matching Options
771+ ....................
772772
773773Symfony2 creates an instance of:class: `Symfony\\ Component\\ HttpFoundation\\ RequestMatcher `
774774for each ``access_control `` entry, which determines whether or not a given
@@ -863,8 +863,8 @@ will match any ``ip``, ``host`` or ``method``:
863863
864864.. _security-book-access-control-enforcement-options :
865865
866- Access Enforcement
867- ..................
866+ (b) Access Enforcement
867+ ......................
868868
869869Once Symfony2 has decided which ``access_control `` entry matches (if any),
870870it then *enforces * access restrictions based on the ``roles `` and ``requires_channel ``