security:
    password_hashers:
        App\Domain\CmsUser: auto
    providers:
        cms_users:
            id: App\Security\UserProvider
    role_hierarchy:
        ROLE_ADMIN: [ROLE_EDITOR, ROLE_PUBLISHER]
        ROLE_PUBLISHER: ROLE_EDITOR
    firewalls:
        admin:
            pattern: ^/%kant.admin_path%(?:/|$)
            lazy: true
            provider: cms_users
            form_login:
                login_path: admin_login
                check_path: admin_login
                enable_csrf: true
                default_target_path: admin_pages
            login_throttling:
                max_attempts: 5
                interval: '1 minute'
            logout:
                path: admin_logout
                target: admin_login
                enable_csrf: true
    access_control:
        - { path: ^/%kant.admin_path%/login$, roles: PUBLIC_ACCESS }
        - { path: ^/%kant.admin_path%, roles: ROLE_EDITOR }