@@ -51,8 +51,8 @@ which makes creating a voter even easier::
5151
5252..versionadded ::7.3
5353
54- The `$vote ` parameter in the:method: ` Symfony \\ Component \\ Security \\ Core \\ Authorization \\ Voter \\ VoterInterface:: voteOnAttribute` method
55- was introduced in Symfony 7.3.
54+ The `` $vote `` argument of the`` voteOnAttribute() `` method was introduced
55+ in Symfony 7.3.
5656
5757.. _how-to-use-the-voter-in-a-controller :
5858
@@ -173,11 +173,10 @@ would look like this::
173173 protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token, ?Vote $vote = null): bool
174174 {
175175 $user = $token->getUser();
176- $vote ??= new Vote();
177176
178177 if (!$user instanceof User) {
179178 // the user must be logged in; if not, deny access
180- $vote->reasons[] = 'The user is not logged in.';
179+ $vote?->addReason( 'The user is not logged in.') ;
181180 return false;
182181 }
183182
@@ -205,12 +204,15 @@ would look like this::
205204
206205 private function canEdit(Post $post, User $user): bool
207206 {
208- // this assumes that the Post object has a `getOwner ()` method
209- if ($user === $post->getOwner ()) {
207+ // this assumes that the Post object has a `getAuthor ()` method
208+ if ($user === $post->getAuthor ()) {
210209 return true;
211210 }
212211
213- $vote->reasons[] = 'You are not the owner of the Post.';
212+ $vote?->addReason(sprintf(
213+ 'The logged in user (username: %s) is not the author of this post (id: %d).',
214+ $user->getUsername(), $post->getId()
215+ ));
214216
215217 return false;
216218 }
@@ -233,9 +235,9 @@ To recap, here's what's expected from the two abstract methods:
233235``voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token, ?Vote $vote = null) ``
234236 If you return ``true `` from ``supports() ``, then this method is called. Your
235237 job is to return ``true `` to allow access and ``false `` to deny access.
236- The ``$token `` can be used to find the current user object (if any). The `` $vote ``
237- argument can be used toadd a reason to the vote. In this example, all of the
238- complex business logic is includedto determine access .
238+ The ``$token `` can be used to find the current user object (if any).
239+ The `` $vote `` argument can be used toprovide an explanation for the vote.
240+ This explanation is includedin log messages and on exception pages .
239241
240242.. _declaring-the-voter-as-a-service :
241243