How to move basic Security and routes under prefix?

This topic contains 3 replies, has 2 voices, and was last updated by Mike Kudelya 3 years, 5 months ago.

Starting from March 1, 2020 the forum has been switched to the read-only mode. Please head to StackOverflow for support.

Creator

Topic

April 10, 2017 at 3:19 am #35536

makoso

Participant

Hi, I fight with moving oroplatform under prefix. Im getting errors dont know why.

My routing.yml looks now that:

#
# ORO routes
#
oro_default:
    path:  /admin/
    defaults:
        _controller: OroDashboardBundle:Dashboard:view

oro_auto_routing:
    prefix:   /admin
    resource: .
    type:     oro_auto

oro_expose:
    prefix:   /admin
    resource: .
    type:     oro_expose
csme:
    resource: "@AppBundle/Controller/"
    type: annotation

# ORO routes

oro_default:

path: /admin/

defaults:

_controller: OroDashboardBundle:Dashboard:view

oro_auto_routing:

prefix: /admin

resource: .

type: oro_auto

oro_expose:

prefix: /admin

resource: .

type: oro_expose

csme:

resource: "@AppBundle/Controller/"

type: annotation

Now my Default controller works well, but i cannot access to the admin url im getting error like this when security inside app folder is empty:

UndefinedMethodException in Manager.php line 232: Attempted to call an undefined method named "getOrganizationContext" of class "Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken"

1	UndefinedMethodException in Manager.php line 232: Attempted to call an undefined method named "getOrganizationContext" of class "Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken"

When i configure security.yml im getting errors like this issue:
Issue 53
But i cant fix it to work…

Can someone help me how to setup rights security with routings i want only move oroplatform all functions under /admin and build front of application in AppBundle

Im the new in ORO,
thanks for any reply.

Creator

Topic

Viewing 3 replies - 1 through 3 (of 3 total)

Author

Replies

April 12, 2017 at 8:19 am #35537

Mike Kudelya

Participant

My example is based on OroCRM version 1.10.18. Here is my app/config/routing.yml:

#
# 3rd party routes
#
nelmio_api_doc:
    resource: "@NelmioApiDocBundle/Resources/config/routing.yml"
    prefix:   /api/doc

fos_js_routing:
    resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml"

_imagine:
    resource: .
    type:     imagine

#
# ORO routes
#
oro_default:
    pattern:  /admin/
    defaults:
        _controller: OroDashboardBundle:Dashboard:view

oro_auto_routing:
    prefix:   /admin
    resource: .
    type:     oro_auto

oro_expose:
    resource: .
    type:     oro_expose

# 3rd party routes

nelmio_api_doc:

resource: "@NelmioApiDocBundle/Resources/config/routing.yml"

prefix: /api/doc

fos_js_routing:

resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml"

_imagine:

resource: .

type: imagine

# ORO routes

oro_default:

pattern: /admin/

defaults:

_controller: OroDashboardBundle:Dashboard:view

oro_auto_routing:

prefix: /admin

resource: .

type: oro_auto

oro_expose:

resource: .

type: oro_expose

and vendor/oro/platform/src/Oro/Bundle/UserBundle/Resources/config/oro/app.yml:

security:
    providers:
        chain_provider:
            chain:
                providers:                  [in_memory, oro_user]
        oro_user:
            id:                             oro_user.security.provider
        in_memory:
            memory:
                users:                      []

    encoders:
        Oro\Bundle\UserBundle\Entity\User: sha512

    firewalls:
        login:
            pattern:                        ^/admin/user/(login|reset-request|send-email|check-email)$
            provider:                       chain_provider
            anonymous:                      true

        reset_password:
            pattern:                        ^/admin/user/reset/*
            provider:                       chain_provider
            anonymous:                      true

        main:
            pattern:                        ^/admin/
            provider:                       chain_provider
            organization-form-login:
                csrf_provider:              form.csrf_provider
                check_path:                 oro_user_security_check
                login_path:                 oro_user_security_login
            logout:
                path:                       oro_user_security_logout
            organization-remember-me:
                key:                        %secret%
                name:                       BAPRM
                lifetime:                   1209600   # stay logged for two weeks
                httponly:                   true
            anonymous:                      false

security:

providers:

chain_provider:

chain:

providers: [in_memory, oro_user]

oro_user:

id: oro_user.security.provider

in_memory:

memory:

users: []

encoders:

Oro\Bundle\UserBundle\Entity\User: sha512

firewalls:

pattern: ^/admin/user/(login|reset-request|send-email|check-email)$

provider: chain_provider

anonymous: true

reset_password:

pattern: ^/admin/user/reset/*

provider: chain_provider

anonymous: true

main:

pattern: ^/admin/

provider: chain_provider

organization-form-login:

csrf_provider: form.csrf_provider

check_path: oro_user_security_check

login_path: oro_user_security_login

logout:

path: oro_user_security_logout

organization-remember-me:

key: %secret%

lifetime: 1209600 # stay logged for two weeks

httponly: true

anonymous: false

When i have deleted /app/cache/[dev&prod] redictories i got working application with /admin prefix.

April 12, 2017 at 11:12 am #35538

makoso

Participant

Hi, im working on ORO Platform v2.1.0 and have to spend i think ~6-8h to make it worked.
I have to add 2 new firewalls new main mached “/” and other mached second secured area “/panel” when i do it i get problems with define access_list, i cant do it inside security.yml, when i add here some access_list the system was crashed, and throw errors.

now my working configurations looks like this:

#
# 3rd party routes
#
nelmio_api_doc:
    resource: "@NelmioApiDocBundle/Resources/config/routing.yml"
    prefix:   /api/doc

fos_js_routing:
    resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml"

_liip_imagine:
    resource: "@LiipImagineBundle/Resources/config/routing.xml"

#
# ORO routes
#
oro_default:
    path:  /admin/
    defaults:
        _controller: OroDashboardBundle:Dashboard:view

oro_auto_routing:
    prefix: /admin
    resource: .
    type:     oro_auto

oro_expose:
    prefix: /admin
    resource: .
    type:     oro_expose
app:
    resource: "@AppBundle/Controller/"
    type: annotation

# 3rd party routes

nelmio_api_doc:

resource: "@NelmioApiDocBundle/Resources/config/routing.yml"

prefix: /api/doc

fos_js_routing:

resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml"

_liip_imagine:

resource: "@LiipImagineBundle/Resources/config/routing.xml"

# ORO routes

oro_default:

path: /admin/

defaults:

_controller: OroDashboardBundle:Dashboard:view

oro_auto_routing:

prefix: /admin

resource: .

type: oro_auto

oro_expose:

prefix: /admin

resource: .

type: oro_expose

app:

resource: "@AppBundle/Controller/"

type: annotation

and security:

security:
    acl:
        connection: default
        cache:
            id: security.acl.cache.doctrine
            prefix: sf2_acl_

    access_decision_manager:
        strategy: unanimous

    providers:
        chain_provider:
            chain:
                providers:                  [in_memory, oro_user]
        oro_user:
            id:                             oro_user.security.provider
        in_memory:
            memory:
                users:                      []

    encoders:
        Oro\Bundle\UserBundle\Entity\User: sha512
        Symfony\Component\Security\Core\User\User: plaintext

    firewalls:
        dev:
            pattern:                        ^/(_(profiler|wdt)|css|images|js)/
            security:                       false

        install:
            pattern:                        ^/installer
            security:                       false
            anonymous:                      true

        wsse_secured:
            pattern:                        ^/api/(rest|soap).*
            wsse:
                lifetime:                   3600
                realm:                      "Secured API"
                profile:                    "UsernameToken"
            context:                        main

        login:
            pattern:                        ^/admin/user/(login|reset-request|send-email|check-email)$
            provider:                       chain_provider
            anonymous:                      true

        reset_password:
            pattern:                        ^/admin/user/reset/*
            provider:                       chain_provider
            anonymous:                      true

        embedded_form:
            pattern:                        ^/admin/embedded-form/(submit|success)
            provider:                       chain_provider
            anonymous:                      true

        tracking_data:
            pattern:                        ^/admin/tracking/data/create
            provider:                       chain_provider
            anonymous:                      true

        so_main:
            pattern:                        ^/
            organization-form-login:
                csrf_provider:              security.csrf.token_manager
                check_path:                 oro_user_security_check
                login_path:                 authentication_login
            logout:
                path:                       oro_user_security_logout
            anonymous:                      true
        main:
            pattern:                        ^/admin/
            provider:                       chain_provider
            organization-form-login:
                csrf_provider:              security.csrf.token_manager
                check_path:                 oro_user_security_check
                login_path:                 oro_user_security_login
            logout:
                path:                       oro_user_security_logout
            organization-remember-me:
                key:                        %secret%
                name:                       RMMEAD
                lifetime:                   1209600   # stay logged for two weeks
                httponly:                   true
            anonymous:                      false
        panel:
            pattern:                        ^/panel
            form_login:
                csrf_provider:              security.csrf.token_manager
                check_path:                 oro_user_security_check
                login_path:                 authentication_login
            logout:
                path:                       oro_user_security_logout
            organization-remember-me:
                key:                        %secret%
                name:                       RMME
                lifetime:                   1209600   # stay logged for two weeks
                httponly:                   true
            anonymous:                      false

100

security:

acl:

connection: default

cache:

id: security.acl.cache.doctrine

prefix: sf2_acl_

access_decision_manager:

strategy: unanimous

providers:

chain_provider:

chain:

providers: [in_memory, oro_user]

oro_user:

id: oro_user.security.provider

in_memory:

memory:

users: []

encoders:

Oro\Bundle\UserBundle\Entity\User: sha512

Symfony\Component\Security\Core\User\User: plaintext

firewalls:

dev:

pattern: ^/(_(profiler|wdt)|css|images|js)/

security: false

install:

pattern: ^/installer

security: false

anonymous: true

wsse_secured:

pattern: ^/api/(rest|soap).*

wsse:

lifetime: 3600

realm: "Secured API"

profile: "UsernameToken"

context: main

pattern: ^/admin/user/(login|reset-request|send-email|check-email)$

provider: chain_provider

anonymous: true

reset_password:

pattern: ^/admin/user/reset/*

provider: chain_provider

anonymous: true

embedded_form:

pattern: ^/admin/embedded-form/(submit|success)

provider: chain_provider

anonymous: true

tracking_data:

pattern: ^/admin/tracking/data/create

provider: chain_provider

anonymous: true

so_main:

pattern: ^/

organization-form-login:

csrf_provider: security.csrf.token_manager

check_path: oro_user_security_check

login_path: authentication_login

logout:

path: oro_user_security_logout

anonymous: true

main:

pattern: ^/admin/

provider: chain_provider

organization-form-login:

csrf_provider: security.csrf.token_manager

check_path: oro_user_security_check

login_path: oro_user_security_login

logout:

path: oro_user_security_logout

organization-remember-me:

key: %secret%

lifetime: 1209600 # stay logged for two weeks

httponly: true

anonymous: false

panel:

pattern: ^/panel

form_login:

csrf_provider: security.csrf.token_manager

check_path: oro_user_security_check

login_path: authentication_login

logout:

path: oro_user_security_logout

organization-remember-me:

key: %secret%

lifetime: 1209600 # stay logged for two weeks

httponly: true

anonymous: false

and here i cant place next access_list, i tried copy default and extend it butt still not working, for now i use securrity annotation on controller that collect “/panel” routing but in next works i must have to configure it here,a ctualy i dont know how.

What is best practice to start app with ORO platform default application or create all own?

Thanks for reply.

April 19, 2017 at 7:29 am #35539

Mike Kudelya

Participant

What is best practice to start app with ORO platform default application or create all own?

I’m really sorry but I don’t fully understand the question. Would it be possible for you to give me more details on it? Are talking about platform customization?

Author

Replies

Viewing 3 replies - 1 through 3 (of 3 total)

The forum ‘OroPlatform – Security’ is closed to new topics and replies.

OroPlatform Forums