Check ownership in REST method

[nass600]

Hi there.

I have a rest controller driven by FOSRestBundle where live two methods:

• getUsers: /api/secured/users (retrieve all users in the system)
• getUser: /api/secured/users/{id} (retrieve only the user with id = {id})

Both, must be accessed by ROLE_ADMIN but in addition, the method getUser, must be accessed by the user information itself. This means, once the user has logged in via Wsse and having its id I wanto make a rest call to get the full information about it.

This check can be done inside the controller by getting the user from the generated token and comparing it to the id you pass in the method but, is there any other way to do such check, for instance, in config.yml? Or maybe any special ROLE_MYSELF out of the box?

Thank you