Now I understand all your points but it's not work anyway.
I try to add an extra access control so that anonymous users can login. 
Accessing the login path leads to the inivite loop I mention in my post 
before.

Here my configuration for now:

security.config:
    providers:
        my:
            entity: { class: MyUserBundle:User, property: username }

    firewalls:
        my:
            pattern: /my.*
            form-login:
                check_path: /my/login-check
                login_path: /my/login
            logout: true
            provider: my

    access_control:
        - { path: /my/login.*, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: /my.*, role: ROLE_USER }

Any ideas?

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en

Reply via email to