使用FOSRestBundle进行Symfony访问控制

Question

我正在尝试创建一个名为/ admin的经过身份验证的部分，但是放入access_control已经破坏了我的API（没有返回任何内容）。我不需要API的身份验证，所以我使用了IS_ANONYMOUS作为角色。这是我的security.yml，我做错了什么？

security:
    encoders:
        FOS\UserBundle\Model\UserInterface: sha512

    providers:
        in_memory:
            memory: ~
        fos_userbundle:
            id: fos_user.user_provider.username        # fos_user.user_provider.username_email does not seem to work (OAuth-spec related ("username + password") ?)

    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        default:
            anonymous: ~
            http_basic: ~

        oauth_token:                                   # Everyone can access the access token URL.
            pattern: ^/api/oauth/v2/token
            security: false
        api:
            pattern: ^/api                             # All URLs are protected
            fos_oauth: true                            # OAuth2 protected resource
            stateless: true                            # Do no set session cookies
            anonymous: true                           # Anonymous access is not allowed
            security: false
    access_control:
        # require ROLE_ADMIN for /admin*
        - { path: ^/admin, roles: ROLE_ADMIN }
        - { path: ^/api, roles: IS_ANONYMOUS }