When are user roles refreshed and how to force it?

Question

First off, I\'m not using FOSUserBundle and I can\'t because I\'m porting a legacy system which has its own Model layer (no Doctrine/Mongo/whatsoever here) and other very cu

Answer 1

Take a look here, set always_authenticate_before_granting to true at security.yml.