jms_security_extra:
    secure_all_services: false
    expressions: true

security:
    providers:
        fos_userbundle:
            id: fos_user.user_provider.username

    encoders:
        FOS\UserBundle\Model\UserInterface: sha512

    firewalls:
        dev:
            pattern:    ^/(_profiler|_wdt|css|js|img|images)
            security:   false

        main:
            pattern: ^/
            form_login:
                provider: fos_userbundle
                csrf_provider: form.csrf_provider
                use_referer: true
                always_use_default_target_path: false
                default_target_path: /
            logout:
                path:   /logout
                success_handler: authentication_handler
                invalidate_session: false
                target: /login
            anonymous:    true

    access_control:
        - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/, role: ROLE_A }
        - { path: ^/lc, role: ROLE_A }
        - { path: ^/mc, role: ROLE_B }

    role_hierarchy:
        ROLE_A:           ROLE_USER
        ROLE_B:           ROLE_A
        ROLE_ADMIN:       ROLE_B
        ROLE_SUPER_ADMIN: ROLE_ADMIN