Skip to content

Update security.rst #19655

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
Closed

Update security.rst #19655

wants to merge 1 commit into from

Conversation

fabpico
Copy link

@fabpico fabpico commented Mar 11, 2024

Explain how to fix not activated bundle.

Explain how to fix not activated bundle.
@carsonbot carsonbot added this to the 6.4 milestone Mar 11, 2024
@javiereguiluz
Copy link
Member

@fabpico thanks for this proposal ... but we're closing it as "won't merge".

First, your proposal is technically correct. You didn't do anything wrong 👍

However, we think that this information is not needed at this point. We never display this reminder about enabling the bundle in case it wasn't enabled for you. This is because:

  • Symfony by default uses Symfony Flex, which is the one that enables bundles automatically. So, all/most newcomers will use Flex even if they don't know about it;
  • Advanced Symfony developers can remove Flex if they want ... the bundles won't be enabled automatically in that case and they might forget ... but since they are experts, they understand the error message because it's common when some bundle is not enabled or you didn't delete some config file after removing a bundle. So, they can solve this error.

The only scenario where this could be an issue is if a Symfony newcomer has removed Flex somehow ... but that's an edge case.

So, for now we're closing this as "won't merge" ... but we'll reconsider this in the future if we receive more reports like this.

Thanks again and we hope to get more contributions from you soon 🙌

@fabpico
Copy link
Author

fabpico commented Mar 18, 2024

@javiereguiluz There is another scenario: Enough expert not to use Flex, but not enough to do with Symfony error messages to interpret the error message in such a way that a bundle is not activated.

Proof why this is not an edge case: Here you can see how many people have searched for exactly this problem, currently with 9k views. https://stackoverflow.com/questions/55279011/there-is-no-extension-able-to-load-the-configuration-for-security
This stackoverflow thread let me decide to trying to optimize the Symfony documentation, so I opened this pull request.

@javiereguiluz
Copy link
Member

@fabpico thanks for the additional insights. I've created an issue in Symfony code repository to try to improve this error message: symfony/symfony#54336

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants