How to close TinyMCE in Symfony2.3 from unauthorized users?

Question

symfony

Good afternoon,

I have Symfony 2.3

Installed github.com/stfalcon/TinymceBundle (slightly modified to work with AngularJS)
Used as a file manager: github.com/2b3ez/FileManager4TinyMCE

The question is that TinyMCE4 itself is available via direct links, and everything would nothing, let them use it, but the file manager is also available via direct links, like site.ru/bundles/stfalcontinymce/vendor/tinymce/plugins/filemanager/dialog.php

How can this loophole be closed? Ideally, of course, check if the user has a role for any access to TinyMCE.
I would not want to dig into the sources and rewrite links to "controller"

Answer 1

Symmony entry point enabled? no... so the symphony can't help here. The only option is to transfer the dialog code to the controllers and tweak the paths and security.yml a little bit, or make crutches.