Why use Voters instead of simple role checks?

While roles are simple strings (e.g., ROLE_ADMIN), Voters allow for complex logic, such as checking if a user is the specific author of an object they are trying to edit.

Does this skill support API Platform?

Yes, it includes specific patterns for implementing security checks within API Platform resource attributes using the is_granted() expression.

Can I test my authorization logic with this skill?

Absolutely. The skill provides boilerplate for unit testing individual Voters and functional testing to ensure the application correctly returns 403 Forbidden status codes.

What are Symfony Voters?

Voters are specialized classes in Symfony that decide whether a user has permission to perform a specific action on a resource, such as editing a post or viewing a profile.

Symfony Voters Authorization

Name: Symfony Voters Authorization
Author: MakFly

byMakFly

•

Security & Testing

Implements granular, decoupled authorization logic using Symfony Voters to secure controllers, services, and APIs.

This skill provides a comprehensive framework for managing complex authorization requirements in Symfony applications. By leveraging Symfony Voters, it allows developers to centralize permission logic, keeping controllers clean and business logic focused. It covers everything from basic entity-based checks to complex, resource-less voting scenarios, and includes patterns for integration with API Platform and Twig, alongside robust unit and functional testing strategies to ensure application security.

Key Features

01Decoupled authorization logic via centralized Voter classes

02Implementation patterns for dependency-aware and resource-less voting

03Native support for API Platform security attributes

0421 GitHub stars

05Seamless integration with Symfony Controllers, Services, and Twig

06Standardized unit and functional testing templates for security logic

Use Cases

01Securing CRUD operations based on object ownership or status

02Implementing complex attribute-based access control (ABAC)

03Enforcing feature access based on external service logic like subscriptions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add makfly/superpowers-symfony symfony-voters

For use in Claude.ai and ChatGPT

Download Skill