# To get started with security, check out the documentation:
# http://symfony.com/doc/current/book/security.html
security:

    encoders:
        AppBundle\Entity\AdminSystemUser: bcrypt
        DailyInfoLegacyBundle\Entity\User: bcrypt


    role_hierarchy:
        ROLE_USER:
        ROLE_STAFF: [ROLE_ADMIN]
        ROLE_STAFF_MGMT: [ROLE_STAFF]

    # http://symfony.com/doc/current/book/security.html#where-do-users-come-from-user-providers
    providers:
        public_users:
            entity: { class: LegacyBundle\Entity\User, property: username }
        admin_system_users:
            entity: { class: AppBundle\Entity\AdminSystemUser, property: username }
        fos_userbundle:
          id: fos_user.user_provider.username

    firewalls:
        # disables authentication for assets and the profiler, adapt it according to your needs
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        admin_system:
            pattern: ^/admin
            anonymous: ~
            logout:
                path: /admin/logout
                target: /admin/login
                invalidate_session: false
            remember_me:
                secret: '%secret%'
                remember_me_parameter: '_admin_remember_me'
                lifetime: 3600
            guard:
                entry_point: app.security.admin_login_form_authenticator
                authenticators:
                    - app.security.admin_login_form_authenticator
        public_users:
            anonymous: ~
            logout:
                path: /logout
                invalidate_session: false
#            remember_me:
#                secret: '%secret%'
#                remember_me_parameter: '_remember_me'
#                lifetime: 3600
            guard:
                entry_point: app.security.login_form_authenticator
                authenticators:
                    - app.security.public_user_impersonation_authenticator
                    - app.security.login_form_authenticator
                    - app.facebook_authenticator

    access_control:
        admin_login:
            path: /admin/login
            roles: IS_AUTHENTICATED_ANONYMOUSLY
            requires_channel: https
        admin_area:
            path: ^/admin
            roles: ROLE_STAFF
            requires_channel: https
        members_login:
            path: /login
            roles: IS_AUTHENTICATED_ANONYMOUSLY
            requires_channel: https
        members_register:
            path: /users/register
            roles: IS_AUTHENTICATED_ANONYMOUSLY
            requires_channel: https
        members_area:
            path: /users
            roles: ROLE_USER
            requires_channel: https
        all:
            path: ^/
            roles: IS_AUTHENTICATED_ANONYMOUSLY
            requires_channel: https