PHPackages                             th0masso/ssacc-bundle - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. th0masso/ssacc-bundle

ActiveSymfony-bundle[Authentication & Authorization](/categories/authentication)

th0masso/ssacc-bundle
=====================

Symfony Security Access Control Checker

v1.0.0(2y ago)13351MITPHPPHP ^8.0

Since Jan 15Pushed 2y ago1 watchersCompare

[ Source](https://github.com/Th0masso/symfony-security-access-control-checker)[ Packagist](https://packagist.org/packages/th0masso/ssacc-bundle)[ RSS](/packages/th0masso-ssacc-bundle/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (1)Dependencies (9)Versions (2)Used By (0)

SSACC - Symfony Security Access Control Checker
===============================================

[](#ssacc---symfony-security-access-control-checker)

SSACC is a Symfony bundle that list all your project's routes that do not have permission checks.

The bundle will check if certain functions are called on the first line of the controller's action.

You can learn more about [how to ensure that all the routes on my Symfony app have access control with this article](https://blog.theodo.com/2023/10/ensure-that-symfony-routes-have-access-control/).

Table of contents
-----------------

[](#table-of-contents)

- [Installation](#installation)
- [Configuration](#configuration)
- [Usage](#usage)
- [Example](#example)

Installation
============

[](#installation)

```
composer require --dev ssacc/ssacc-bundle
```

Configuration
=============

[](#configuration)

You should create a config file like this one:

```
ssacc-config:
  project_path: "./"
  controllers_path: "src/"
  exclude_all_routes_that_start_with:
    - "web_profiler"
    - "twig"
  exclude_full_routes:
    - "error_controller::preview"
  security_requirement:
    - "$this->denyAccessUnlessGranted"
    - "!$this->isGranted"
```

Those are the default values, you can change them as you wish.

You can use `ssacc-config.dist.yaml` as a template.

The default config path is `./ssacc-config.yaml`, but you can change it in the next step.

Description of the options
--------------------------

[](#description-of-the-options)

- `project_path`: The path to the root of your project.
- `controllers_path`: The path to the controllers directory.
- `exclude_all_routes_that_start_with`: An array of strings. All routes that start with any of those strings will be excluded.
- `exclude_full_routes`: An array of strings. All routes that match any of those strings will be excluded.
- `security_requirement`: An array of strings. All routes functions that do not have any of those strings on the first line of the controller's action will be listed.

Usage
=====

[](#usage)

The only argument is the relative path to the config file you created in the previous step.

It is optional and the default value is `ssacc-config.yaml` (root of your project).

```
php bin/console security:check-access-control myConfigDir/my-config-file.yaml
```

Example
=======

[](#example)

[![Example](image/ssacc-example.png)](image/ssacc-example.png)

*TODO: add the example code to this repo.*

###  Health Score

25

—

LowBetter than 37% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity15

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity46

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

846d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/94fe2da12465346d88537f34d5f1a4fc82351ce5a82dff2ef7b1b681bf5eac65?d=identicon)[Th0masso](/maintainers/Th0masso)

---

Top Contributors

[![Th0masso](https://avatars.githubusercontent.com/u/55784802?v=4)](https://github.com/Th0masso "Th0masso (14 commits)")

---

Tags

symfonysecurityaclchecksapi-platform

###  Code Quality

Static AnalysisPHPStan

Code StylePHP CS Fixer

Type Coverage Yes

### Embed Badge

![Health badge](/badges/th0masso-ssacc-bundle/health.svg)

```
[![Health](https://phpackages.com/badges/th0masso-ssacc-bundle/health.svg)](https://phpackages.com/packages/th0masso-ssacc-bundle)
```

###  Alternatives

[sylius/sylius

E-Commerce platform for PHP, based on Symfony framework.

8.4k5.6M650](/packages/sylius-sylius)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.3M152](/packages/sulu-sulu)[simplesamlphp/simplesamlphp

A PHP implementation of a SAML 2.0 service provider and identity provider.

1.1k12.4M193](/packages/simplesamlphp-simplesamlphp)[scheb/2fa

Two-factor authentication for Symfony applications (please use scheb/2fa-bundle to install)

578630.7k1](/packages/scheb-2fa)[prestashop/prestashop

PrestaShop is an Open Source e-commerce platform, committed to providing the best shopping cart experience for both merchants and customers.

9.0k15.4k](/packages/prestashop-prestashop)[gesdinet/jwt-refresh-token-bundle

Implements a refresh token system over Json Web Tokens in Symfony

70516.4M35](/packages/gesdinet-jwt-refresh-token-bundle)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)