# To get started with security, check out the documentation:# To get started with security, check out the documentation:
# https://symfony.com/doc/current/security.html
security:
  encoders:
    FOS\UserBundle\Model\UserInterface: bcrypt
  # https://symfony.com/doc/current/security.html#b-configuring-how-users-are-loaded
  providers:
    fos_userbundle:
      id: fos_user.user_provider.username
  firewalls:
    dev:
      pattern: ^/(_(profiler|wdt)|css|images|js)/
      security: false
      # https://symfony.com/doc/current/security/form_login_setup.html
      # activate different ways to authenticate
      # https://symfony.com/doc/current/security.html#a-configuring-how-your-users-will-authenticate
      http_basic: ~
    main:
      pattern: ^/
      anonymous: ~
      logout: true
      logout_on_user_change: true
      form_login:
        provider: fos_userbundle
        csrf_token_generator: security.csrf.token_manager
        default_target_path: dashboard
        login_path: fos_user_security_login
        check_path: /login_check

  role_hierarchy:
    ROLE_ADMIN:       ROLE_USER
    ROLE_SUPER_ADMIN: ROLE_ADMIN

  access_control:
    - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/dashboard$, role: IS_AUTHENTICATED_REMEMBERED }
    - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/u, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin/, role: ROLE_ADMIN }