using security with output DTO do not target the correct object.

[RachidTMT]

I'm using a security voter is_granted('PERSON_VIEW', object) in GET operation and also i use an Output DTO to format the rendering. the issue is that rather than voter check on the current object passed in url it checks on output, so it return always a 403 status.
Any idea please.
@dunglas
Best regards.

[jzecca]

I think this can be similar (or identical) to this SO question of mine:
https://stackoverflow.com/questions/75017502/security-issue-after-migrating-datatransformer-to-stateprovider

Posted it back in january, but I'd still love to get a feedback on this!