About symfony-voters
A Symfony security skill for aligning voters and security expressions with domain rules. It guides decision mapping, enforcement points, and tests for allowed, forbidden, and invalid paths.
Key features
- 01Map actor, resource, and action decisions
- 02Implement voter or constraint logic
- 03Enforce checks in controllers and API operations
- 04Test allowed, forbidden, and invalid paths
- 05Avoid duplicated policy and preserve explicit denies
Use cases
- 01Harden access-control boundaries
- 02Align authorization with domain rules
- 03Verify explicit denial for sensitive actions
- 04Check errors for privileged-state leaks
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ dev-toolings/ superpowers-symfony --skill symfony-votersAfter installing, type/symfony-votersin Claude Code to confirm it loaded.
Bundled filesreference.md
Details
From the project READMESymfony Voters (Symfony)
Use when
- Hardening access-control or validation boundaries.
- Aligning voters/security expressions with domain rules.
Default workflow
- Map actor/resource/action decision matrix.
- Implement voter/constraint logic at the right boundary.
- Wire checks at controllers and API operations.
- Test allowed/forbidden/invalid paths comprehensively.
Guardrails
- Avoid policy logic duplication across layers.
- Do not leak privileged state via error detail.
- Preserve explicit deny behavior for sensitive actions.
Progressive disclosure
- Use this file for execution posture and risk controls.
- Open references when deep implementation details are needed.
Output contract
- Security boundary updates.
- Integration points enforcing decisions.
- Negative-path test results.
References
reference.md
Comments
Markdown supported