security:
  enable_authenticator_manager: true
  password_hashers:
    Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
  providers:
    app_user_provider:
      entity:
        class: App\Entity\User
        property: email
  firewalls:
    dev:
      pattern: ^/(_(profiler|wdt)|css|images|js)/
      security: false
    main:
      logout:
        path: app_logout
      lazy: true
      provider: app_user_provider
      custom_authenticators:
        - App\Security\FacebookAuthenticator
        - App\Security\CustomAuthenticator
      form_login:
        login_path: app_login
        check_path: app_login
        enable_csrf: true
      access_denied_url: /

  role_hierarchy:
    ROLE_ADMIN: ROLE_USER
    ROLE_SUPER_ADMIN: [ ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH ]

  access_control:
    - { path: ^/system, roles: ROLE_ADMIN }
