Security has role vs is_granted

Question

Could some explain to me the difference between : @Security("has_role("ROLE_ADMIN")") and @Security("is_granted("ROLE_ADMIN")") and which one is more recommended?

Answer 1

They do the same job in that case, but the has_role() function in security expressions is deprecated since Symfony 4.2, so we should use is_granted() instead.

Answer 2

I think that has_role() checks if the user already has the role. On the other hand, is_granted() runs the Voters to check if there is a role to be added to the existing roles.