Change the role of a distant user without having to relog

fosuserbundle, symfony

Solution

According to the Security Configuration Reference, there's a `always_authenticate_before_granting` option. There's not much informations about that, but I've tried it with custom roles loading from database and it does the trick. It looks like everytime you will make a new request, the security component will reload roles.

So if you want to make sure your roles are refreshed and reloaded in your user session just set this option to `true`in your `security.yml` :

# app/config/security.yml
security:
    always_authenticate_before_granting:  false

Problem

Original source