Security

Token

There is no security token. It was removed in 0b4993.

Firewall

pimcore_studio Name
Security enabled
Stateless

Configuration

Key Value
provider Pimcore\Security\User\UserProvider
context pimcore_admin
entry_point (none)
user_checker Pimcore\Security\User\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "login_throttling"
  "json_login"
  "Pimcore\Bundle\StudioBackendBundle\Security\Authenticator\AdminTokenAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#3744
  -map: Symfony\Component\Security\Http\AccessMap {#3743 …}
  -logger: Monolog\Logger {#1385 …}
  -httpPort: 80
  -httpsPort: 443
}
(none) (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#3700
  -sessionKey: "_security_pimcore_admin"
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#3753 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#3697 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#584 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#3699 …}
  -logger: Monolog\Logger {#1385 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#3721 …}
}
0.03 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#3694
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#3693 …}
}
(none) (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#3751
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "pimcore_studio_api_logout"
  ]
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#583 …}
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#1394 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#3778 …}
  -csrfTokenManager: null
}
(none) (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#3668
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#583 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#605 …}
  -map: Symfony\Component\Security\Http\AccessMap {#3743 …}
}
4.55 ms (none)

Authenticators

Status Authenticator
skipped
"Pimcore\Bundle\StudioBackendBundle\Security\Authenticator\AdminTokenAuthenticator"

This authenticator did not support the request.

skipped
"Symfony\Component\Security\Http\Authenticator\JsonLoginAuthenticator"

This authenticator did not support the request.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
2
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\AuthorizationVoter"
3
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\UserPermissionVoter"
4
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\HasOneOfUserPermissionVoter"
5
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\PublicAuthorizationVoter"
6
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\ElementTypePermissionVoter"
7
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\UserPerspectiveVoter"
8
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\UserPasswordVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_PIMCORE_USER
Symfony\Component\HttpFoundation\Request {#16
  +attributes: Symfony\Component\HttpFoundation\ParameterBag {#19 …}
  +request: Symfony\Component\HttpFoundation\InputBag {#17 …}
  +query: Symfony\Component\HttpFoundation\InputBag {#18 …}
  +server: Symfony\Component\HttpFoundation\ServerBag {#22 …}
  +files: Symfony\Component\HttpFoundation\FileBag {#21 …}
  +cookies: Symfony\Component\HttpFoundation\InputBag {#20 …}
  +headers: Symfony\Component\HttpFoundation\HeaderBag {#23 …}
  #content: ""
  #languages: null
  #charsets: null
  #encodings: null
  #acceptableContentTypes: [
    "*/*"
  ]
  #pathInfo: "/pimcore-studio/api/data-object/grid/available-columns-for-relation"
  #requestUri: "/pimcore-studio/api/data-object/grid/available-columns-for-relation?classId=1&relationField=Accessories"
  #baseUrl: ""
  #basePath: null
  #method: "GET"
  #format: null
  #session: Symfony\Component\HttpFoundation\Session\Session {#1527 …}
  #locale: null
  #defaultLocale: "en"
  -preferredFormat: null
  -isHostValid: true
  -isForwardedValid: true
  -isSafeContentPreferred: ? bool
  -trustedValuesCache: []
  -isIisRewrite: false
  basePath: ""
  format: "html"
}
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
DENIED
The user doesn't have ROLE_PIMCORE_USER.
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\AuthorizationVoter"
ABSTAIN
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\UserPermissionVoter"
ABSTAIN
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\HasOneOfUserPermissionVoter"
ABSTAIN
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\PublicAuthorizationVoter"
ABSTAIN
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\ElementTypePermissionVoter"
ABSTAIN
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\UserPerspectiveVoter"
ABSTAIN
"Pimcore\Bundle\StudioBackendBundle\Security\Voter\UserPasswordVoter"
ABSTAIN
Show voter details