SensioFrameworkExtraBundle
SensioFrameworkExtraBundle copied to clipboard
@Security doesn't return 401
According to these docs http://symfony.com/doc/current/book/security.html#access-controls-authorization, I suppose to get 401 in response to the following action for unauthneticated users:
/**
* ...
* @Security("has_role('ROLE_USER')")
* ...
*/
public function getPostAction()
{
...
}
Instead I'm getting 403. Is it intentional or my app just misconfigured(it certanly might be or there is a conflict with FosRestBundle)?
Can you reproduce this on standard project or show your source code?