ninegate/src/ninegate-1.0/app/config/security.yml

security:
    providers:
        cadoles_core_db_provider:
            entity:
                class: CadolesCoreBundle:User
                property: username
                                    
    encoders:
        Cadoles\CoreBundle\Entity\User: 
            id: cadoles.core.password.encoder
        Cadoles\CoreBundle\Entity\Registration:
            id: cadoles.core.password.encoder
        
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        main:
            provider: cadoles_core_db_provider
            anonymous: ~

            form_login:
                login_path: cadoles_core_login
                check_path: cadoles_core_login
                use_referer: true
                target_path_parameter: cadoles_core_home
                csrf_parameter: _csrf_security_token
                csrf_token_id: a_private_string
            
            logout:
                invalidate_session: true
                path: cadoles_core_kill
                target: cadoles_core_home
            
            light_saml_sp:
                provider: cadoles_core_db_provider
                user_creator: cadoles.saml_user_creator
                username_mapper: cadoles.saml_user_mapper
                login_path: /saml/login
                check_path: /saml/acs
            
    access_control:
            - { path: ^/user, roles: [ROLE_ADMIN, ROLE_MODO, ROLE_USER] }
            - { path: ^/config/home, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/niveau02, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/group, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/registration, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/user, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/icon, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/item, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/alert, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config/page, roles: [ROLE_ADMIN, ROLE_MODO] }
            - { path: ^/config, roles: [ROLE_ADMIN] }