Allow switching/impersonating only to particular users in Symfony2

Question

EXPLANATION

Allowing user to switch to any other user is easy in Symfony2. My question is, how to allow certain user to switch only to certain other users? I'm using FOSUserBundle as my users provider.

EXAMPLE

There is 5 users, UserA, UserB, UserC, UserD, UserE, but only 3 of them are linked together.

UserA can switch to UserB and UserC

UserB can switch to UserA and UserC

UserC can switch to UserA and UserB

Thanks for your help!

Answer 1

You could possibly implement this type of thing by overriding the default SwitchUserListener.

The parameter you would override is: security.authentication.switchuser_listener.class

For example, in parameters.yml:

parameters:
  security.authentication.switchuser_listener.class: My\Project\Security\Listener\SwitchUserListener

Where, in your custom listener class, you'd implement Symfony\Component\Security\Http\Firewall\ListenerInterface and use the existing Symfony\Component\Security\Http\Firewall\SwitchUserListener class as a basis for your custom implementation.

Answer 2

If you want to impersonate Admin Users in to Regular user there are some examples :)

https://gist.github.com/1589120

http://symfony.com/doc/current/book/security.html#impersonating-a-user