今天继续给任氏有无轩加功能。这次是对log页面进行了限制,需要进行HTTP一般登录才能访问。
在SF2中,是通过修改app/config/security.yml来完成的,由于我只是进行HTTP验证,并且也不复杂,所以这个文件也很简单:
security:
encoders:
SymfonyComponentSecurityCoreUserUser: plaintext
role_hierarchy:
ROLE_ADMIN: ROLE_USER
ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]
providers:
in_memory:
memory:
users:
admin: { password: 123456, roles: [ 'ROLE_ADMIN' ] }
firewalls:
#dev:
# pattern: ^/(_(profiler|wdt)|css|images|js)/
# security: false
#login:
# pattern: ^/demo/secured/login$
# security: false
secured_area:
#pattern: ^/demo/secured/
#form_login:
# check_path: /demo/secured/login_check
# login_path: /demo/secured/login
#logout:
# path: /demo/secured/logout
# target: /demo/
pattern: ^/
anonymous: ~
http_basic:
realm: Log
#anonymous: ~
#http_basic:
# realm: Secured Demo Area
access_control:
#- { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY, requires_channel: https }
#- { path: ^/_internal/secure, roles: IS_AUTHENTICATED_ANONYMOUSLY, ip: 127.0.0.1 }
- {path: ^/log, roles: ROLE_ADMIN}
至此,这个登录功能就算完成了。

Leave a Reply to Aibin Cancel reply