CODEWITHSUNDEEP
phpsecuritysymfony1
Manu
Manu

Reputation: 4500

URL hacking in symfony admin generator

In symfony's admin generator, I can choose, for instance, to disable the delete and edit actions in generator.yml

Could a user change the URL and still access those functions, or should I also disable them in security.yml ?

Upvotes: 1

Views: 1137

Answers (1)

Vladislav Rastrusny
Vladislav Rastrusny

Reputation: 30013

Obviosly, if you disable them in config, they will not work in any way unless you enable them again. Fabien is not stupid ;)

Upvotes: 2

Related Questions