Symfony 2 - 从数据库加载角色

我的角色存储在数据库中,我试图在登录时动态加载它们.我正在做的是查询角色并将其设置在我的用户提供程序中的用户对象上,如下所示:

public function loadUserByUsername($username) {
    $q = $this
        ->createQueryBuilder('u')
        ->where('u.username = :username')
        ->setParameter('username', $username)
        ->getQuery()
    ;

    try {
        // The Query::getSingleResult() method throws an exception
        // if there is no record matching the criteria.
        $user = $q->getSingleResult();

        // Permissions
        $permissions = $this->_em->getRepository('E:ModulePermission')->getPermissionsForUser($user);

        if ($permissions !== null) {
            foreach ($permissions as $permission) {
                $name = strtoupper(str_replace(" ", "_", $permission['name']));

                $role = "ROLE_%s_%s";

                if ($permission['view']) {
                    $user->addRole(sprintf($role, $name, 'VIEW'));
                }

                if ($permission['add']) {
                    $user->addRole(sprintf($role, $name, 'ADD'));
                }

                if ($permission['edit']) {
                    $user->addRole(sprintf($role, $name, 'EDIT'));
                }

                if ($permission['delete']) {
                    $user->addRole(sprintf($role, $name, 'DELETE'));
                }
            }
        }

    } catch (NoResultException $e) {
        throw new UsernameNotFoundException(sprintf('Unable to find an active admin Entity:User object identified by "%s".', $username), null, 0, $e);
    }

    return $user;
}

而用户实体:

class User implements AdvancedUserInterface, \Serializable {
    ....

    protected $roles;

    ....

    public function __construct() {
        $this->salt = base_convert(sha1(uniqid(mt_rand(), true)), 16, 36);
        $this->roles = array();
    }


    ....


    public function getRoles() {
        $roles = $this->roles;

        // Ensure we having something
        $roles[] = static::ROLE_DEFAULT;

        return array_unique($roles);
    }

    public function addRole($role) {
        $role = strtoupper($role);
        $roles = $this->getRoles();
        if ($role === static::ROLE_DEFAULT) {
            return $this;
        }

        if (!in_array($role, $roles, true)) {
            $this->roles[] = $role;
        }

        return $this;
    }

    public function hasRole($role) {
        $role = strtoupper($role);
        $roles = $this->getRoles();
        return in_array($role, $roles, true);
    }
}

这工作正常,花花公子,当我这样做时,我看到了正确的角色:

$this->get('security.context')->getUser()->getRoles()

问题(我认为)是令牌不知道这些角色.因为在令牌上调用getRoles()只显示ROLE_USER,这是默认角色.

在我看来,令牌是在UserProvider加载用户之前创建的.我已经浏览了很多安全组件,但我不能在我的生活中找到正确的部分,以便正确设置这些角色,以便令牌知道它们.

更新从数据库文档加载角色后工作正常,但这与我的用例不匹配,如此处所示.我的架构不同,因为每个角色都有其他权限(查看/添加/编辑/删除),这就是我在这里尝试这种方法的原因.我不想改变我的架构只是为了使用Symfony的安全性.我宁愿理解为什么这些角色在我的用户对象上没有被正确绑定(不确定这里正确的学说词).