[AIBundle] Add #[IsGrantedTool] for tool access control
#102
Conversation
valtzu
force-pushed
the
tools-security
branch
2 times, most recently
from
0fe967a to
d1cb720
Compare
There was a problem hiding this comment.
Thanks for bringing it to Symfony AI and switching to the bundle - I think it makes more sense 👍
Besides the pipeline, this needs a rebase after #94, and a brief section in the docs of the bundle - it's a powerful new feature users should know about :)
chr-hertel
added
AI Bundle
|
Rebased & added docs. About PHPStan error, not sure what to do with it, it's about this 3rd parameter: https://github.com/symfony/symfony/blob/7.4/src/Symfony/Component/Security/Core/Authorization/AuthorizationCheckerInterface.php#L27 |
| return 'ACME Corp.'; | ||
| } | ||
| } | ||
|
|
There was a problem hiding this comment.
maybe to clarify, we could add:
| The attribute ``IsGrantedTool`` can be added on class- or method-level - even multiple | |
| times. If multiple attributes apply to one tool call, a logical AND is used and all access | |
| decisions have to grant access. | |
or similar - if I even got it right
my first thought here would be to ignore the error in the |
Add
#[IsGrantedTool]attribute for tool access control with similar behavior as#[IsGranted]insymfony/security-http.Moved from php-llm/llm-chain#382