From 2ff6fcbe58a6228620b7c603a5b1184637ab603d Mon Sep 17 00:00:00 2001 From: Leighton Thomas Date: Thu, 27 Aug 2026 12:30:33 +0100 Subject: [PATCH] Update parameter security documentation In practice it seems to 403 due to the logic in `ApiPlatform\State\Provider\SecurityParameterProvider` --- core/filters.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/filters.md b/core/filters.md index d462693c0ce..8d8b2ecb8e8 100644 --- a/core/filters.md +++ b/core/filters.md @@ -939,7 +939,7 @@ class User {} ## Parameter Security You can secure individual parameters using Symfony expression language. When a security expression -evaluates to `false`, the parameter will be ignored and treated as if it wasn't provided. +evaluates to `false`, a context appropriate `AccessDeniedException` will be thrown. ```php