How to move basic Security and routes under prefix?

Hi, I fight with moving oroplatform under prefix. Im getting errors dont know why.

My routing.yml looks now that:

YAML

# # ORO routes # oro_default: path: /admin/ defaults: _controller: OroDashboardBundle:Dashboard:view oro_auto_routing: prefix: /admin resource: . type: oro_auto oro_expose: prefix: /admin resource: . type: oro_expose csme: resource: "@AppBundle/Controller/" type: annotation

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

# # ORO routes # oro_default:     path:  /admin/     defaults:         _controller: OroDashboardBundle:Dashboard:view   oro_auto_routing:     prefix:   /admin     resource: .     type:     oro_auto   oro_expose:     prefix:   /admin     resource: .     type:     oro_expose csme:     resource: "@AppBundle/Controller/"     type: annotation

Now my Default controller works well, but i cannot access to the admin url im getting error like this when security inside app folder is empty:

YAML

UndefinedMethodException in Manager.php line 232: Attempted to call an undefined method named "getOrganizationContext" of class "Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken"

1	UndefinedMethodException in Manager.php line 232: Attempted to call an undefined method named "getOrganizationContext" of class "Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken"

When i configure security.yml im getting errors like this issue:
Issue 53
But i cant fix it to work…

Can someone help me how to setup rights security with routings i want only move oroplatform all functions under /admin and build front of application in AppBundle

Im the new in ORO,
thanks for any reply.

Topic

[Mike KudelyaParticipant]

Hi

My example is based on OroCRM version 1.10.18. Here is my app/config/routing.yml:

YAML

# # 3rd party routes # nelmio_api_doc: resource: "@NelmioApiDocBundle/Resources/config/routing.yml" prefix: /api/doc fos_js_routing: resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml" _imagine: resource: . type: imagine # # ORO routes # oro_default: pattern: /admin/ defaults: _controller: OroDashboardBundle:Dashboard:view oro_auto_routing: prefix: /admin resource: . type: oro_auto oro_expose: resource: . type: oro_expose

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30

# # 3rd party routes # nelmio_api_doc:     resource: "@NelmioApiDocBundle/Resources/config/routing.yml"     prefix:   /api/doc   fos_js_routing:     resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml"   _imagine:     resource: .     type:     imagine   # # ORO routes # oro_default:     pattern:  /admin/     defaults:         _controller: OroDashboardBundle:Dashboard:view   oro_auto_routing:     prefix:   /admin     resource: .     type:     oro_auto   oro_expose:     resource: .     type:     oro_expose

and vendor/oro/platform/src/Oro/Bundle/UserBundle/Resources/config/oro/app.yml:

YAML

security: providers: chain_provider: chain: providers: [in_memory, oro_user] oro_user: id: oro_user.security.provider in_memory: memory: users: [] encoders: Oro\Bundle\UserBundle\Entity\User: sha512 firewalls: login: pattern: ^/admin/user/(login|reset-request|send-email|check-email)$ provider: chain_provider anonymous: true reset_password: pattern: ^/admin/user/reset/* provider: chain_provider anonymous: true main: pattern: ^/admin/ provider: chain_provider organization-form-login: csrf_provider: form.csrf_provider check_path: oro_user_security_check login_path: oro_user_security_login logout: path: oro_user_security_logout organization-remember-me: key: %secret% name: BAPRM lifetime: 1209600 # stay logged for two weeks httponly: true anonymous: false

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

security:     providers:         chain_provider:             chain:                 providers:                  [in_memory, oro_user]         oro_user:             id:                             oro_user.security.provider         in_memory:             memory:                 users:                      []       encoders:         Oro\Bundle\UserBundle\Entity\User: sha512       firewalls:         login:             pattern:                        ^/admin/user/(login|reset-request|send-email|check-email)$             provider:                       chain_provider             anonymous:                      true           reset_password:             pattern:                        ^/admin/user/reset/*             provider:                       chain_provider             anonymous:                      true           main:             pattern:                        ^/admin/             provider:                       chain_provider             organization-form-login:                 csrf_provider:              form.csrf_provider                 check_path:                 oro_user_security_check                 login_path:                 oro_user_security_login             logout:                 path:                       oro_user_security_logout             organization-remember-me:                 key:                        %secret%                 name:                       BAPRM                 lifetime:                   1209600   # stay logged for two weeks                 httponly:                   true             anonymous:                      false

When i have deleted /app/cache/[dev&prod] redictories i got working application with /admin prefix.

[makosoParticipant]

Hi, im working on ORO Platform v2.1.0 and have to spend i think ~6-8h to make it worked.
I have to add 2 new firewalls new main mached “/” and other mached second secured area “/panel” when i do it i get problems with define access_list, i cant do it inside security.yml, when i add here some access_list the system was crashed, and throw errors.

now my working configurations looks like this:

YAML

# # 3rd party routes # nelmio_api_doc: resource: "@NelmioApiDocBundle/Resources/config/routing.yml" prefix: /api/doc fos_js_routing: resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml" _liip_imagine: resource: "@LiipImagineBundle/Resources/config/routing.xml" # # ORO routes # oro_default: path: /admin/ defaults: _controller: OroDashboardBundle:Dashboard:view oro_auto_routing: prefix: /admin resource: . type: oro_auto oro_expose: prefix: /admin resource: . type: oro_expose app: resource: "@AppBundle/Controller/" type: annotation

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33

# # 3rd party routes # nelmio_api_doc:     resource: "@NelmioApiDocBundle/Resources/config/routing.yml"     prefix:   /api/doc   fos_js_routing:     resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml"   _liip_imagine:     resource: "@LiipImagineBundle/Resources/config/routing.xml"   # # ORO routes # oro_default:     path:  /admin/     defaults:         _controller: OroDashboardBundle:Dashboard:view   oro_auto_routing:     prefix: /admin     resource: .     type:     oro_auto   oro_expose:     prefix: /admin     resource: .     type:     oro_expose app:     resource: "@AppBundle/Controller/"     type: annotation

and security:

YAML

security: acl: connection: default cache: id: security.acl.cache.doctrine prefix: sf2_acl_ access_decision_manager: strategy: unanimous providers: chain_provider: chain: providers: [in_memory, oro_user] oro_user: id: oro_user.security.provider in_memory: memory: users: [] encoders: Oro\Bundle\UserBundle\Entity\User: sha512 Symfony\Component\Security\Core\User\User: plaintext firewalls: dev: pattern: ^/(_(profiler|wdt)|css|images|js)/ security: false install: pattern: ^/installer security: false anonymous: true wsse_secured: pattern: ^/api/(rest|soap).* wsse: lifetime: 3600 realm: "Secured API" profile: "UsernameToken" context: main login: pattern: ^/admin/user/(login|reset-request|send-email|check-email)$ provider: chain_provider anonymous: true reset_password: pattern: ^/admin/user/reset/* provider: chain_provider anonymous: true embedded_form: pattern: ^/admin/embedded-form/(submit|success) provider: chain_provider anonymous: true tracking_data: pattern: ^/admin/tracking/data/create provider: chain_provider anonymous: true so_main: pattern: ^/ organization-form-login: csrf_provider: security.csrf.token_manager check_path: oro_user_security_check login_path: authentication_login logout: path: oro_user_security_logout anonymous: true main: pattern: ^/admin/ provider: chain_provider organization-form-login: csrf_provider: security.csrf.token_manager check_path: oro_user_security_check login_path: oro_user_security_login logout: path: oro_user_security_logout organization-remember-me: key: %secret% name: RMMEAD lifetime: 1209600 # stay logged for two weeks httponly: true anonymous: false panel: pattern: ^/panel form_login: csrf_provider: security.csrf.token_manager check_path: oro_user_security_check login_path: authentication_login logout: path: oro_user_security_logout organization-remember-me: key: %secret% name: RMME lifetime: 1209600 # stay logged for two weeks httponly: true anonymous: false

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100

security:     acl:         connection: default         cache:             id: security.acl.cache.doctrine             prefix: sf2_acl_       access_decision_manager:         strategy: unanimous       providers:         chain_provider:             chain:                 providers:                  [in_memory, oro_user]         oro_user:             id:                             oro_user.security.provider         in_memory:             memory:                 users:                      []       encoders:         Oro\Bundle\UserBundle\Entity\User: sha512         Symfony\Component\Security\Core\User\User: plaintext       firewalls:         dev:             pattern:                        ^/(_(profiler|wdt)|css|images|js)/             security:                       false           install:             pattern:                        ^/installer             security:                       false             anonymous:                      true           wsse_secured:             pattern:                        ^/api/(rest|soap).*             wsse:                 lifetime:                   3600                 realm:                      "Secured API"                 profile:                    "UsernameToken"             context:                        main           login:             pattern:                        ^/admin/user/(login|reset-request|send-email|check-email)$             provider:                       chain_provider             anonymous:                      true           reset_password:             pattern:                        ^/admin/user/reset/*             provider:                       chain_provider             anonymous:                      true           embedded_form:             pattern:                        ^/admin/embedded-form/(submit|success)             provider:                       chain_provider             anonymous:                      true           tracking_data:             pattern:                        ^/admin/tracking/data/create             provider:                       chain_provider             anonymous:                      true           so_main:             pattern:                        ^/             organization-form-login:                 csrf_provider:              security.csrf.token_manager                 check_path:                 oro_user_security_check                 login_path:                 authentication_login             logout:                 path:                       oro_user_security_logout             anonymous:                      true         main:             pattern:                        ^/admin/             provider:                       chain_provider             organization-form-login:                 csrf_provider:              security.csrf.token_manager                 check_path:                 oro_user_security_check                 login_path:                 oro_user_security_login             logout:                 path:                       oro_user_security_logout             organization-remember-me:                 key:                        %secret%                 name:                       RMMEAD                 lifetime:                   1209600   # stay logged for two weeks                 httponly:                   true             anonymous:                      false         panel:             pattern:                        ^/panel             form_login:                 csrf_provider:              security.csrf.token_manager                 check_path:                 oro_user_security_check                 login_path:                 authentication_login             logout:                 path:                       oro_user_security_logout             organization-remember-me:                 key:                        %secret%                 name:                       RMME                 lifetime:                   1209600   # stay logged for two weeks                 httponly:                   true             anonymous:                      false

and here i cant place next access_list, i tried copy default and extend it butt still not working, for now i use securrity annotation on controller that collect “/panel” routing but in next works i must have to configure it here,a ctualy i dont know how.

What is best practice to start app with ORO platform default application or create all own?

Thanks for reply.

[Mike KudelyaParticipant]

What is best practice to start app with ORO platform default application or create all own?

I’m really sorry but I don’t fully understand the question. Would it be possible for you to give me more details on it? Are talking about platform customization?

[Author]

Replies