Symfony2 ACL - isGranted始终返回false

时间:2013-09-05 18:06:22

标签: php symfony acl

我已经花了几个小时试图让Symfony的ACL在我的项目中工作,但我根本找不到解决方案。这是我的测试示例:

$competition = $this->getDoctrine()->getManager()
    ->getRepository('MyBundle:Competition')->find(158);

$objectIdentity = ObjectIdentity::fromDomainObject($competition);
$aclProvider = $this->get('security.acl.provider');
try {
    $acl = $aclProvider->findAcl($objectIdentity);
} catch (\Symfony\Component\Security\Acl\Exception\AclNotFoundException $e) {
    $acl = $aclProvider->createAcl($objectIdentity);
}

// retrieving the security identity of the currently logged-in user
$securityIdentity = UserSecurityIdentity::fromAccount(
        $this->get('security.context')->getToken()->getUser());

// grant owner access
$acl->insertObjectAce($securityIdentity, MaskBuilder::MASK_EDIT);
$aclProvider->updateAcl($acl);

$competition = $this->getDoctrine()->getManager()
    ->getRepository('MyBundle:Competition')->find(158);

$foo = $this->get('security.context')->isGranted(MaskBuilder::MASK_EDIT, $competition);

var_dump($foo); // always bool(false)

我可以看到表格中显示的数据,但isGranted始终返回false。知道我做错了什么吗?

acl_classes

id  class_type
2   Me\MyBundle\Entity\Competition

acl_entries

id  class_id    object_identity_id  security_identity_id    field_name  ace_order   mask    granting    granting_strategy   audit_success   audit_failure
1   2           3                   2                       NULL        0           4       1           all                 0               0

acl_object_identities

id  parent_object_identity_id   class_id    object_identifier   entries_inheriting
3   NULL                        2           158                 1

acl_object_identity_ancestors

object_identity_id  ancestor_id
3                   3

acl_security_identities

id  identifier                  username
2   Me\MyBundle\Entity\User-Me  1

1 个答案:

答案 0 :(得分:0)

我的实体中遇到了同样的问题,它实现了ObjectIdentityInterface ...

我对getType的实现是:

public function getType() {
      return __CLASS__;
}

这是返回声明它的类的名称(静态),并且在comparisson中失败

所以我把它改成了dinamically:

public function getType() {
      return get_class($this);
} 

希望有所帮助