security:
    acl:
        connection: default
    encoders:
        Symfony\Component\Security\Core\User\User: sha512
        FSC\ModelBundle\Entity\User: sha512

    role_hierarchy:
        ROLE_ADMIN:       ROLE_USER
        ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

    providers:
        in_memory:
            users:
                user:  { password: userpass, roles: [ 'ROLE_USER' ] }
                admin: { password: adminpass, roles: [ 'ROLE_ADMIN' ] }
        in_db:
            entity: { class: FSCModelBundle:User, property: email }

    firewalls:
        profiler:
            pattern:  ^/_profiler
            security: false

        wdt:
            pattern:  ^/_wdt
            security: false

        account:
            provider: in_db
            pattern : ^/user

            form_login:
                check_path: /login_check
                login_path: /login
                default_target_path: /
                provider: in_db
                remember_me: true
            logout:
                path:   /user/logout
                target: /
            anonymous: true
            remember_me:
                key:      123456789
                lifetime: 3600

        public:
            pattern: /.*
            security: false

    access_control:
        - { path: ^/user/confirm/, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/user/resetpassword/, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/user, role: ROLE_USER }
        #- { path: /login, roles: IS_AUTHENTICATED_ANONYMOUSLY, requires_channel: https }