The documentation says, that one has to add the sfGuardBasicSecurityFilter in such way, when one want to use the remember me filter:
security:
class: sfGuardBasicSecurityFilter
However the problem is, that the according config handler generates this code:
// does this action require security?
if ($actionInstance->isSecure())
{
// register the security filter (here the sfGuardBasicSecurityFilter)
}
Ok, this would work fine only in secured actions. But what about the fact, that the user should always be loged in the complete application and not only in the secured actions.
So i think the sfGuardBasicSecurityFilter should be decoupled from the normal sfBasicSecurityFilter and should be called outside the security filter (optional: rename it to sfGuardRememberMeFilter).
