Issues

• What this framework owes about the staleness of claim-based attributes

  enhancementquestion
  Spomky-Labs/access-control-framework#25 · Filter by author Spomky opened on Oct 3, 2026

• DelegatedRequesterInterface has no implementation for an exchanged token: the act claim (RFC 8693)

  enhancement
  Spomky-Labs/access-control-framework#24 · Filter by author Spomky opened on Oct 3, 2026

• A denial that asks for a stronger authentication instead of refusing

  enhancement
  Spomky-Labs/access-control-framework#23 · Filter by author Spomky opened on Oct 3, 2026

• Claims as ABAC attributes: where acr, amr, auth_time and scope belong in an AccessRequest

  enhancement
  Spomky-Labs/access-control-framework#22 · Filter by author Spomky opened on Oct 3, 2026

• Roles are inert behind an OpenID Provider: OidcUser hands every voter a single ROLE_USER

  enhancement
  Spomky-Labs/access-control-framework#21 · Filter by author Spomky opened on Oct 3, 2026

• A requester authenticated by an OpenID Provider has no object to read attributes from

  enhancement
  Spomky-Labs/access-control-framework#20 · Filter by author Spomky opened on Oct 3, 2026

• Upstream watch: isGrantedForUser(null, ...) to check a guest's permissions

  Spomky-Labs/access-control-framework#14 · Filter by author Spomky opened on Aug 25, 2026

• Upstream watch: renaming of security.access_control's roles and attributes keys

  Spomky-Labs/access-control-framework#13 · Filter by author Spomky opened on Aug 25, 2026

• Decide whether to follow Symfony 8.2's deprecation of multi-role access control rules

  enhancement
  Spomky-Labs/access-control-framework#12 · Filter by author Spomky opened on Aug 25, 2026

• AccessControlTrait is missing getAccessDecision()

  enhancement
  Spomky-Labs/access-control-framework#11 · Filter by author Spomky opened on Aug 25, 2026

• #[IsGranted(statusCode:)] must throw the status-code-specific HttpException

  bug
  Spomky-Labs/access-control-framework#10 · Filter by author Spomky opened on Aug 25, 2026

• Vote::extraData and the AccessDecision are dropped when bridging Security voters and strategies

  bug
  Spomky-Labs/access-control-framework#9 · Filter by author Spomky opened on Aug 25, 2026

• Voter priority declared with #[AsTaggedItem] is lost when the Security bridge wraps the voter

  bug
  Spomky-Labs/access-control-framework#8 · Filter by author Spomky opened on Aug 25, 2026

• Show the role hierarchy as a graph in the profiler panel

  enhancement
  Spomky-Labs/access-control-framework#7 · Filter by author Spomky opened on Aug 25, 2026

• Add debug commands for the role hierarchy (debug:roles, Mermaid dump)

  enhancement
  Spomky-Labs/access-control-framework#6 · Filter by author Spomky opened on Aug 25, 2026

• Support wildcard placeholders in the role hierarchy (Symfony 8.2)

  enhancement
  Spomky-Labs/access-control-framework#5 · Filter by author Spomky opened on Aug 25, 2026