[FrameworkBundle] added a way to configure the switch-user behavior

symfony · Oct 20, 2010 · 4b32114 · 4b32114
1 parent 71228b5
commit 4b32114
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/SecurityExtension.php b/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/SecurityExtension.php
@@ -535,6 +535,14 @@ protected function createSwitchUserListener($container, $id, $config, $defaultPr
         $arguments[1] = new Reference($userProvider);
         $listener->setArguments($arguments);
 
+        if (isset($config['role'])) {
+            $container->setParameter('security.authentication.switchuser.role', $config['role']);
+        }
+
+        if (isset($config['parameter'])) {
+            $container->setParameter('security.authentication.switchuser.parameter', $config['parameter']);
+        }
+
         return $switchUserListenerId;
     }
 

diff --git a/src/Symfony/Bundle/FrameworkBundle/Resources/config/security.xml b/src/Symfony/Bundle/FrameworkBundle/Resources/config/security.xml
@@ -55,6 +55,8 @@
         <parameter key="security.logout_listener.class">Symfony\Component\HttpKernel\Security\Firewall\LogoutListener</parameter>
 
         <parameter key="security.authentication.switchuser_listener.class">Symfony\Component\HttpKernel\Security\Firewall\SwitchUserListener</parameter>
+        <parameter key="security.authentication.switchuser.role">ROLE_ALLOWED_TO_SWITCH</parameter>
+        <parameter key="security.authentication.switchuser.parameter">_switch_user</parameter>
 
         <parameter key="security.access.decision_manager.class">Symfony\Bundle\FrameworkBundle\Security\Authorization\AccessDecisionManager</parameter>
         <parameter key="security.access.simple_role_voter.class">Symfony\Component\Security\Authorization\Voter\RoleVoter</parameter>

diff --git a/src/Symfony/Bundle/FrameworkBundle/Resources/config/security_templates.xml b/src/Symfony/Bundle/FrameworkBundle/Resources/config/security_templates.xml
@@ -47,6 +47,8 @@
             <argument type="service" id="security.account_checker" />
             <argument type="service" id="security.access.decision_manager" />
             <argument type="service" id="logger" on-invalid="null" />
+            <argument>%security.authentication.switchuser.parameter%</argument>
+            <argument>%security.authentication.switchuser.role%</argument>
         </service>
 
         <service id="security.access_listener" class="%security.access_listener.class%">