Skip to content


Subversion checkout URL

You can clone with
Download ZIP
The Symfony PHP framework
Latest commit 6ae61f6 @fabpot fabpot minor #16460 [SecurityBundle] Fix disabling of RoleHierarchyVoter whe…
…n passing empty hierarchy (WouterJ)

This PR was submitted for the 2.3 branch but it was merged into the 2.8 branch instead (closes #16460).


[SecurityBundle] Fix disabling of RoleHierarchyVoter when passing empty hierarchy

| Q             | A
| ------------- | ---
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | #16358
| License       | MIT
| Doc PR        | -

 * When passing `role_hierarchy: ~` in the config, the role hierarchy voter was still enabled. I've now changed this so that an empty hierarchy also results in disabling this voter. With an empty hierarchy, the voter behaves exactly the same as the RoleVoter, so no BC break is introduced here.
 * Added some tests for the RoleHierarchyVoter when passing an empty hierarchy. As it then behaves exactly like RoleVoter, the question is whether we shouldn't just always return ACCESS_ABSTAIN when the hierarchy is empty


96afff6 [SecurityBundle] Fix disabling of RoleHierarchyVoter when passing empty hierarchy
Failed to load latest commit information.
src/Symfony [SecurityBundle] Fix disabling of RoleHierarchyVoter when passing emp…
.editorconfig Add EditorConfig File
.gitignore Add appveyor.yml for C.I. on Windows
.php_cs CS: general fixes
.travis.php [travis] Fail early when an invalid composer.json is found
.travis.yml Merge branch '2.7' into 2.8 Merge branch '2.2' into 2.3 updated CHANGELOG for 2.3.35 updated CHANGELOG for 2.4.9 updated CHANGELOG for 2.5.10 updated CHANGELOG for 2.6.10 updated CHANGELOG for 2.7.7 updated CHANGELOG for 2.8.0-BETA1 fix missing links to update CONTRIBUTORS for 2.3.35
LICENSE Updated copyright to 2015 Merge branch '2.6' into 2.7 Remove aligned '=>' and '=' Merge branch '2.3' into 2.5 [Doc] Use Markdown syntax highlighting Updated Merge branch '2.5' into 2.6 Fix grammar fixed typo feature #16722 [Security][SecurityBundle] Use csrf_token_id instead o… minor #16662 [Yaml] more fixes to changelog and upgrade files (Christ…
appveyor.yml Merge branch '2.7' into 2.8
composer.json Merge branch '2.7' into 2.8
phpunit [ci] Force update of ./phpunit deps
phpunit.xml.dist Merge branch '2.3' into 2.7


What is Symfony?

Symfony is a PHP 5.3 full-stack web framework. It is written with speed and flexibility in mind. It allows developers to build better and easy to maintain websites with PHP.

Symfony can be used to develop all kind of websites, from your personal blog to high traffic ones like Dailymotion or Yahoo! Answers.


Symfony is only supported on PHP 5.3.9 and up.

Be warned that PHP 5.3.16 has a major bug in the Reflection subsystem and is not suitable to run Symfony (


The best way to install Symfony is to use the official Symfony Installer. It allows you to start a new project based on the version you want.


The "Quick Tour" tutorial gives you a first feeling of the framework. If, like us, you think that Symfony can help speed up your development and take the quality of your work to the next level, read the official Symfony documentation.


Symfony is an open source, community-driven project. If you'd like to contribute, please read the Contributing Code part of the documentation. If you're submitting a pull request, please follow the guidelines in the Submitting a Patch section and use Pull Request Template.

Running Symfony Tests

Information on how to run the Symfony test suite can be found in the Running Symfony Tests section.

Something went wrong with that request. Please try again.