Restrict /user route to authenticated requests only

BDE-ESIEE · Oct 15, 2021 · fa9aa74 · fa9aa74
1 parent c561bd5
commit fa9aa74
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/config/security.yml b/app/config/security.yml
@@ -56,3 +56,4 @@ security:
         - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: ^/api/doc, role: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: ^/user/.*, role: ROLE_USER }