Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

[Security] Deprecated ROLE_PREVIOUS_ADMIN #51813

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

Conversation

mfadul24
Copy link

@mfadul24 mfadul24 commented Oct 2, 2023

Q A
Branch? 6.3
Bug fix? yes
New feature? no
Deprecations? yes
License MIT

The SwitchUserListener is still using the ROLE_PREVIOUS_ADMIN role. I've renamed it to IS_IMPERSONATOR that is the role since SF 6.0.

@carsonbot
Copy link

Hey!

I see that this is your first PR. That is great! Welcome!

Symfony has a contribution guide which I suggest you to read.

In short:

  • Always add tests
  • Keep backward compatibility (see https://symfony.com/bc).
  • Bug fixes must be submitted against the lowest maintained branch where they apply (see https://symfony.com/releases)
  • Features and deprecations must be submitted against the 6.4 branch.

Review the GitHub status checks of your pull request and try to solve the reported issues. If some tests are failing, try to see if they are failing because of this change.

When two Symfony core team members approve this change, it will be merged and you will become an official Symfony contributor!
If this PR is merged in a lower version branch, it will be merged up to all maintained branches within a few days.

I am going to sit back now and wait for the reviews.

Cheers!

Carsonbot

@chalasr
Copy link
Member

chalasr commented Oct 2, 2023

Thanks for submitting your first contribution to Symfony.
This code was necessary for the remember-me system to work before it was refactored. With the new implementation and the IS_IMPERSONATOR attribute, it is not needed anymore.
Even if it should have been removed in 6.0 given the role has been deprecated in 5.x, I think it is safer to do it for the next major version. And it has been done already in #50957.
So unfortunately I think we can close this PR.

/cc @wouterj in case you think otherwise

@wouterj
Copy link
Member

wouterj commented Oct 3, 2023

I agree. Also note that IS_IMPERSONATOR is an attribute, not a role, which is why #50957 didn't add it to the roles array but rather removes the deprecated ROLE_PREVIOUS_ADMIN role.

@wouterj wouterj closed this Oct 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants
Morty Proxy This is a proxified and sanitized view of the page, visit original site.