Why does Symfony require the ROLE_ prefix on roles?

Question

symfony

All roles you assign to a user must begin with the ROLE_ prefix. Otherwise, they won't be handled by Symfony's security system in the normal way (ie unless you're doing something advanced, assigning a role like FOO to a user and then checking for FOO as described below will not work)

Why and why so? How could this be related to "Security"? What does it give?

Answer 1

Because apart from

if ($this->isGranted('ROLE_ADMIN')) {
// Тут код, который доступен только админу
}

Can do like this

if ($this->isGranted('EDIT', $post)) {
// Тут код только для тех пользователей, которые могут редактировать конкретный пост
// Это может быть как автор поста (ROLE_USER), так и админ (ROLE_ADMIN)
}

Thus roles are a special case of security attributes
symfony.com/doc/current/security/voters.html