Revert "Locking down _profiler route to require PIMCORE_ADMIN role to…

… reduce exposure of sensitive info" This reverts commit 63795cc.
pimcore · Oct 17, 2024 · 05029c0 · 05029c0
1 parent 63795cc
commit 05029c0
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/config/packages/security.yaml b/config/packages/security.yaml
@@ -7,7 +7,7 @@ security:
 
     firewalls:
         dev:
-            pattern: ^/(_(wdt)|css|images|js)/
+            pattern: ^/(_(profiler|wdt)|css|images|js)/
             security: false
 
         # Pimcore WebDAV HTTP basic // DO NOT CHANGE!
@@ -29,7 +29,6 @@ security:
         - { path: ^/admin/login/(login|lostpassword|deeplink|csrf-token)$, roles: PUBLIC_ACCESS }
         - { path: ^/admin, roles: ROLE_PIMCORE_USER }
         - { path: ^/asset/webdav, roles: ROLE_PIMCORE_USER }
-        - { path: ^/_profiler, roles: ROLE_PIMCORE_ADMIN }
 
     role_hierarchy:
         # Pimcore admin  // DO NOT CHANGE!