87. role_hierarchy

config/packages/security.yaml

 security:
+    role_hierarchy:
+        ROLE_EDITOR: ROLE_USER
+        ROLE_CHECKER: ROLE_USER
+        ROLE_ADMIN: [ROLE_EDITOR, ROLE_CHECKER]
+        ROLE_SUPER_ADMIN: [ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]
+
     encoders:
         App\Entity\User:
             algorithm: auto

src/DataFixtures/AppFixtures.php

@@ -23,7 +23,7 @@ class AppFixtures extends Fixture
     {
         $admin = new User();
         $admin->setUsername('admin');
-        $admin->setRoles(['ROLE_SUPER_ADMIN', 'ROLE_ALLOWED_TO_SWITCH']);
+        $admin->setRoles(['ROLE_SUPER_ADMIN']);
         $admin->setPassword($this->userPasswordHasher->hashPassword($admin, 'admin'));
 
         $deletedUser = new User();
@@ -42,12 +42,31 @@ class AppFixtures extends Fixture
         $tom->setUsername('tom');
         $tom->setPassword($this->userPasswordHasher->hashPassword($tom, 'tom'));
 
+        $editor = new User();
+        $editor->setUsername('editor');
+        $editor->setRoles(['ROLE_EDITOR']);
+        $editor->setPassword($this->userPasswordHasher->hashPassword($editor, 'editor'));
+
+        $checker = new User();
+        $checker->setUsername('checker');
+        $checker->setRoles(['ROLE_CHECKER']);
+        $checker->setPassword($this->userPasswordHasher->hashPassword($checker, 'checker'));
+
+        $simpleAdmin = new User();
+        $simpleAdmin->setUsername('simple_admin');
+        $simpleAdmin->setRoles(['ROLE_ADMIN']);
+        $simpleAdmin->setPassword($this->userPasswordHasher->hashPassword($simpleAdmin, 'admin'));
+
 
         $manager->persist($admin);
         $manager->persist($deletedUser);
         $manager->persist($expiredUser);
         $manager->persist($tom);
 
+        $manager->persist($editor);
+        $manager->persist($checker);
+        $manager->persist($simpleAdmin);
+
         $manager->flush();
     }
 }

templates/base.html.twig

@@ -30,6 +30,15 @@
 
         <!-- Blog Entries Column -->
         <div class="col-md-8">
+            {% if is_granted('ROLE_EDITOR') %}
+                当前用户是编辑角色
+            {% endif %}
+            {% if is_granted('ROLE_CHECKER') %}
+                当前用户是审核角色
+            {% endif %}
+            {% if is_granted('ROLE_ADMIN') %}
+                当前用户是管理员角色
+            {% endif %}
 
             {% block content %}
             {% endblock %}