Closed
Description
Symfony\Component\Security\Core\Authorization\Voter\Voter
is a CacheableVoterInterface
.
The results are cached by subject class, not by subject value, or ORM\Id
.
When the Voter must depend on the subject value (or state), the Voter result should not be cached.
Please add a warning like this one:
The AccessDecisionManager
cache voters' results by subject class, not by subject value. If the Voter result depends on the subject value, don't extend Symfony\Component\Security\Core\Authorization\Voter\Voter
, implement VoterInterface
directly.