GET https://kbin.spritesserver.nl/index.php/u/@IverCoder@lemm.ee/top/2023-11-07::2023-11-07

Response
200 OK
IP
216.73.216.103
Profiled on
Token
2de72c

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 21.21 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.09 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
Proxies\__CG__\App\Entity\Entry {#1718
  +user: App\Entity\User {#265 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
  +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
  +title: "If only more Linux programs followed sandboxing best practices..."
  +url: "https://i.imgur.com/mfkIRZl.png"
  +body: null
  +type: "image"
  +lang: "en"
  +isOc: false
  +hasEmbed: true
  +commentCount: 95
  +favouriteCount: 574
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699609651 {#2077
    date: 2023-11-10 10:47:31.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2218 …}
  +votes: Doctrine\ORM\PersistentCollection {#2208 …}
  +reports: Doctrine\ORM\PersistentCollection {#2268 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
  +badges: Doctrine\ORM\PersistentCollection {#2251 …}
  +children: [
    5 => App\Entity\EntryComment {#2463
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 10
      +score: 0
      +lastActive: DateTime @1699361204 {#1735
        date: 2023-11-07 13:46:44.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@bizdelnick@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2465 …}
      +nested: Doctrine\ORM\PersistentCollection {#2422 …}
      +votes: Doctrine\ORM\PersistentCollection {#2458 …}
      +reports: Doctrine\ORM\PersistentCollection {#2456 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
      -id: 98387
      -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5826589"
      +editedAt: DateTimeImmutable @1699403787 {#2448
        date: 2023-11-08 01:36:27.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699361204 {#2411
        date: 2023-11-07 13:46:44.0 +01:00
      }
      +"title": 98387
    }
    6 => App\Entity\EntryComment {#1613
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
      +body: """
        With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
        \n
        You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
        \n
        You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
        \n
        Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 26
      +score: 0
      +lastActive: DateTime @1699355970 {#1528
        date: 2023-11-07 12:19:30.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@Blackmist@feddit.uk"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1692 …}
      +nested: Doctrine\ORM\PersistentCollection {#1711 …}
      +votes: Doctrine\ORM\PersistentCollection {#1611 …}
      +reports: Doctrine\ORM\PersistentCollection {#1630 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
      -id: 98211
      -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5824148"
      +editedAt: DateTimeImmutable @1699394504 {#1551
        date: 2023-11-07 23:01:44.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699355970 {#1576
        date: 2023-11-07 12:19:30.0 +01:00
      }
      +"title": 98211
    }
    4 => App\Entity\EntryComment {#2470
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
      +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 34
      +score: 0
      +lastActive: DateTime @1699364043 {#2455
        date: 2023-11-07 14:34:03.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@Drito@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2467 …}
      +nested: Doctrine\ORM\PersistentCollection {#2371 …}
      +votes: Doctrine\ORM\PersistentCollection {#2370 …}
      +reports: Doctrine\ORM\PersistentCollection {#2360 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
      -id: 98504
      -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5827970"
      +editedAt: DateTimeImmutable @1699403948 {#2459
        date: 2023-11-08 01:39:08.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699364043 {#2468
        date: 2023-11-07 14:34:03.0 +01:00
      }
      +"title": 98504
    }
    3 => App\Entity\EntryComment {#2384
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "An app should not be able to access stuff the user did not consent to letting access."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 16
      +score: 0
      +lastActive: DateTime @1699367741 {#2386
        date: 2023-11-07 15:35:41.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2379 …}
      +nested: Doctrine\ORM\PersistentCollection {#2383 …}
      +votes: Doctrine\ORM\PersistentCollection {#1906 …}
      +reports: Doctrine\ORM\PersistentCollection {#1708 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
      -id: 98676
      -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5829871"
      +editedAt: DateTimeImmutable @1699408719 {#2382
        date: 2023-11-08 02:58:39.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699367741 {#2385
        date: 2023-11-07 15:35:41.0 +01:00
      }
      +"title": 98676
    }
    2 => App\Entity\EntryComment {#1361
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1699396327 {#1401
        date: 2023-11-07 23:32:07.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
        "@stella@lemm.ee"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1403 …}
      +nested: Doctrine\ORM\PersistentCollection {#2023 …}
      +votes: Doctrine\ORM\PersistentCollection {#2032 …}
      +reports: Doctrine\ORM\PersistentCollection {#2024 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
      -id: 100078
      -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5845808"
      +editedAt: DateTimeImmutable @1699441630 {#1404
        date: 2023-11-08 12:07:10.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699396327 {#1363
        date: 2023-11-07 23:32:07.0 +01:00
      }
      +"title": 100078
    }
    1 => App\Entity\EntryComment {#2389
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 5
      +score: 0
      +lastActive: DateTime @1699392351 {#1407
        date: 2023-11-07 22:25:51.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@bizdelnick@lemmy.ml"
        "@owsei@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2387 …}
      +nested: Doctrine\ORM\PersistentCollection {#2394 …}
      +votes: Doctrine\ORM\PersistentCollection {#2393 …}
      +reports: Doctrine\ORM\PersistentCollection {#1381 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
      -id: 99833
      -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5843816"
      +editedAt: DateTimeImmutable @1699437154 {#1883
        date: 2023-11-08 10:52:34.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699392351 {#2391
        date: 2023-11-07 22:25:51.0 +01:00
      }
      +"title": 99833
    }
    0 => App\Entity\EntryComment {#2012
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1699396695 {#2021
        date: 2023-11-07 23:38:15.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2013 …}
      +nested: Doctrine\ORM\PersistentCollection {#2035 …}
      +votes: Doctrine\ORM\PersistentCollection {#2036 …}
      +reports: Doctrine\ORM\PersistentCollection {#2144 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
      -id: 100108
      -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5846173"
      +editedAt: DateTimeImmutable @1699442031 {#2028
        date: 2023-11-08 12:13:51.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699396695 {#2029
        date: 2023-11-07 23:38:15.0 +01:00
      }
      +"title": 100108
    }
  ]
  -id: 10491
  -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699365492
  +visibility: "visible             "
  +apId: "https://lemm.ee/post/14024864"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699279092 {#2299
    date: 2023-11-06 14:58:12.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
Proxies\__CG__\App\Entity\Entry {#1718
  +user: App\Entity\User {#265 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
  +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
  +title: "If only more Linux programs followed sandboxing best practices..."
  +url: "https://i.imgur.com/mfkIRZl.png"
  +body: null
  +type: "image"
  +lang: "en"
  +isOc: false
  +hasEmbed: true
  +commentCount: 95
  +favouriteCount: 574
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699609651 {#2077
    date: 2023-11-10 10:47:31.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2218 …}
  +votes: Doctrine\ORM\PersistentCollection {#2208 …}
  +reports: Doctrine\ORM\PersistentCollection {#2268 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
  +badges: Doctrine\ORM\PersistentCollection {#2251 …}
  +children: [
    5 => App\Entity\EntryComment {#2463
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 10
      +score: 0
      +lastActive: DateTime @1699361204 {#1735
        date: 2023-11-07 13:46:44.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@bizdelnick@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2465 …}
      +nested: Doctrine\ORM\PersistentCollection {#2422 …}
      +votes: Doctrine\ORM\PersistentCollection {#2458 …}
      +reports: Doctrine\ORM\PersistentCollection {#2456 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
      -id: 98387
      -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5826589"
      +editedAt: DateTimeImmutable @1699403787 {#2448
        date: 2023-11-08 01:36:27.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699361204 {#2411
        date: 2023-11-07 13:46:44.0 +01:00
      }
      +"title": 98387
    }
    6 => App\Entity\EntryComment {#1613
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
      +body: """
        With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
        \n
        You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
        \n
        You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
        \n
        Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 26
      +score: 0
      +lastActive: DateTime @1699355970 {#1528
        date: 2023-11-07 12:19:30.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@Blackmist@feddit.uk"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1692 …}
      +nested: Doctrine\ORM\PersistentCollection {#1711 …}
      +votes: Doctrine\ORM\PersistentCollection {#1611 …}
      +reports: Doctrine\ORM\PersistentCollection {#1630 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
      -id: 98211
      -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5824148"
      +editedAt: DateTimeImmutable @1699394504 {#1551
        date: 2023-11-07 23:01:44.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699355970 {#1576
        date: 2023-11-07 12:19:30.0 +01:00
      }
      +"title": 98211
    }
    4 => App\Entity\EntryComment {#2470
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
      +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 34
      +score: 0
      +lastActive: DateTime @1699364043 {#2455
        date: 2023-11-07 14:34:03.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@Drito@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2467 …}
      +nested: Doctrine\ORM\PersistentCollection {#2371 …}
      +votes: Doctrine\ORM\PersistentCollection {#2370 …}
      +reports: Doctrine\ORM\PersistentCollection {#2360 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
      -id: 98504
      -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5827970"
      +editedAt: DateTimeImmutable @1699403948 {#2459
        date: 2023-11-08 01:39:08.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699364043 {#2468
        date: 2023-11-07 14:34:03.0 +01:00
      }
      +"title": 98504
    }
    3 => App\Entity\EntryComment {#2384
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "An app should not be able to access stuff the user did not consent to letting access."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 16
      +score: 0
      +lastActive: DateTime @1699367741 {#2386
        date: 2023-11-07 15:35:41.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2379 …}
      +nested: Doctrine\ORM\PersistentCollection {#2383 …}
      +votes: Doctrine\ORM\PersistentCollection {#1906 …}
      +reports: Doctrine\ORM\PersistentCollection {#1708 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
      -id: 98676
      -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5829871"
      +editedAt: DateTimeImmutable @1699408719 {#2382
        date: 2023-11-08 02:58:39.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699367741 {#2385
        date: 2023-11-07 15:35:41.0 +01:00
      }
      +"title": 98676
    }
    2 => App\Entity\EntryComment {#1361
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1699396327 {#1401
        date: 2023-11-07 23:32:07.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
        "@stella@lemm.ee"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1403 …}
      +nested: Doctrine\ORM\PersistentCollection {#2023 …}
      +votes: Doctrine\ORM\PersistentCollection {#2032 …}
      +reports: Doctrine\ORM\PersistentCollection {#2024 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
      -id: 100078
      -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5845808"
      +editedAt: DateTimeImmutable @1699441630 {#1404
        date: 2023-11-08 12:07:10.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699396327 {#1363
        date: 2023-11-07 23:32:07.0 +01:00
      }
      +"title": 100078
    }
    1 => App\Entity\EntryComment {#2389
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 5
      +score: 0
      +lastActive: DateTime @1699392351 {#1407
        date: 2023-11-07 22:25:51.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@bizdelnick@lemmy.ml"
        "@owsei@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2387 …}
      +nested: Doctrine\ORM\PersistentCollection {#2394 …}
      +votes: Doctrine\ORM\PersistentCollection {#2393 …}
      +reports: Doctrine\ORM\PersistentCollection {#1381 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
      -id: 99833
      -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5843816"
      +editedAt: DateTimeImmutable @1699437154 {#1883
        date: 2023-11-08 10:52:34.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699392351 {#2391
        date: 2023-11-07 22:25:51.0 +01:00
      }
      +"title": 99833
    }
    0 => App\Entity\EntryComment {#2012
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1699396695 {#2021
        date: 2023-11-07 23:38:15.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2013 …}
      +nested: Doctrine\ORM\PersistentCollection {#2035 …}
      +votes: Doctrine\ORM\PersistentCollection {#2036 …}
      +reports: Doctrine\ORM\PersistentCollection {#2144 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
      -id: 100108
      -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5846173"
      +editedAt: DateTimeImmutable @1699442031 {#2028
        date: 2023-11-08 12:13:51.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699396695 {#2029
        date: 2023-11-07 23:38:15.0 +01:00
      }
      +"title": 100108
    }
  ]
  -id: 10491
  -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699365492
  +visibility: "visible             "
  +apId: "https://lemm.ee/post/14024864"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699279092 {#2299
    date: 2023-11-06 14:58:12.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
Proxies\__CG__\App\Entity\Entry {#1718
  +user: App\Entity\User {#265 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
  +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
  +title: "If only more Linux programs followed sandboxing best practices..."
  +url: "https://i.imgur.com/mfkIRZl.png"
  +body: null
  +type: "image"
  +lang: "en"
  +isOc: false
  +hasEmbed: true
  +commentCount: 95
  +favouriteCount: 574
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699609651 {#2077
    date: 2023-11-10 10:47:31.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2218 …}
  +votes: Doctrine\ORM\PersistentCollection {#2208 …}
  +reports: Doctrine\ORM\PersistentCollection {#2268 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
  +badges: Doctrine\ORM\PersistentCollection {#2251 …}
  +children: [
    5 => App\Entity\EntryComment {#2463
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 10
      +score: 0
      +lastActive: DateTime @1699361204 {#1735
        date: 2023-11-07 13:46:44.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@bizdelnick@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2465 …}
      +nested: Doctrine\ORM\PersistentCollection {#2422 …}
      +votes: Doctrine\ORM\PersistentCollection {#2458 …}
      +reports: Doctrine\ORM\PersistentCollection {#2456 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
      -id: 98387
      -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5826589"
      +editedAt: DateTimeImmutable @1699403787 {#2448
        date: 2023-11-08 01:36:27.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699361204 {#2411
        date: 2023-11-07 13:46:44.0 +01:00
      }
      +"title": 98387
    }
    6 => App\Entity\EntryComment {#1613
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
      +body: """
        With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
        \n
        You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
        \n
        You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
        \n
        Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 26
      +score: 0
      +lastActive: DateTime @1699355970 {#1528
        date: 2023-11-07 12:19:30.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@Blackmist@feddit.uk"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1692 …}
      +nested: Doctrine\ORM\PersistentCollection {#1711 …}
      +votes: Doctrine\ORM\PersistentCollection {#1611 …}
      +reports: Doctrine\ORM\PersistentCollection {#1630 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
      -id: 98211
      -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5824148"
      +editedAt: DateTimeImmutable @1699394504 {#1551
        date: 2023-11-07 23:01:44.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699355970 {#1576
        date: 2023-11-07 12:19:30.0 +01:00
      }
      +"title": 98211
    }
    4 => App\Entity\EntryComment {#2470
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
      +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 34
      +score: 0
      +lastActive: DateTime @1699364043 {#2455
        date: 2023-11-07 14:34:03.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@Drito@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2467 …}
      +nested: Doctrine\ORM\PersistentCollection {#2371 …}
      +votes: Doctrine\ORM\PersistentCollection {#2370 …}
      +reports: Doctrine\ORM\PersistentCollection {#2360 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
      -id: 98504
      -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5827970"
      +editedAt: DateTimeImmutable @1699403948 {#2459
        date: 2023-11-08 01:39:08.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699364043 {#2468
        date: 2023-11-07 14:34:03.0 +01:00
      }
      +"title": 98504
    }
    3 => App\Entity\EntryComment {#2384
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "An app should not be able to access stuff the user did not consent to letting access."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 16
      +score: 0
      +lastActive: DateTime @1699367741 {#2386
        date: 2023-11-07 15:35:41.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2379 …}
      +nested: Doctrine\ORM\PersistentCollection {#2383 …}
      +votes: Doctrine\ORM\PersistentCollection {#1906 …}
      +reports: Doctrine\ORM\PersistentCollection {#1708 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
      -id: 98676
      -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5829871"
      +editedAt: DateTimeImmutable @1699408719 {#2382
        date: 2023-11-08 02:58:39.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699367741 {#2385
        date: 2023-11-07 15:35:41.0 +01:00
      }
      +"title": 98676
    }
    2 => App\Entity\EntryComment {#1361
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1699396327 {#1401
        date: 2023-11-07 23:32:07.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
        "@stella@lemm.ee"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1403 …}
      +nested: Doctrine\ORM\PersistentCollection {#2023 …}
      +votes: Doctrine\ORM\PersistentCollection {#2032 …}
      +reports: Doctrine\ORM\PersistentCollection {#2024 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
      -id: 100078
      -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5845808"
      +editedAt: DateTimeImmutable @1699441630 {#1404
        date: 2023-11-08 12:07:10.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699396327 {#1363
        date: 2023-11-07 23:32:07.0 +01:00
      }
      +"title": 100078
    }
    1 => App\Entity\EntryComment {#2389
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
      +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 5
      +score: 0
      +lastActive: DateTime @1699392351 {#1407
        date: 2023-11-07 22:25:51.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@bizdelnick@lemmy.ml"
        "@owsei@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2387 …}
      +nested: Doctrine\ORM\PersistentCollection {#2394 …}
      +votes: Doctrine\ORM\PersistentCollection {#2393 …}
      +reports: Doctrine\ORM\PersistentCollection {#1381 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
      -id: 99833
      -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5843816"
      +editedAt: DateTimeImmutable @1699437154 {#1883
        date: 2023-11-08 10:52:34.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699392351 {#2391
        date: 2023-11-07 22:25:51.0 +01:00
      }
      +"title": 99833
    }
    0 => App\Entity\EntryComment {#2012
      +user: App\Entity\User {#265 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
      +image: null
      +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
      +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
      +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1699396695 {#2021
        date: 2023-11-07 23:38:15.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@IverCoder@lemm.ee"
        "@MonkderZweite@feddit.ch"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2013 …}
      +nested: Doctrine\ORM\PersistentCollection {#2035 …}
      +votes: Doctrine\ORM\PersistentCollection {#2036 …}
      +reports: Doctrine\ORM\PersistentCollection {#2144 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
      -id: 100108
      -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/5846173"
      +editedAt: DateTimeImmutable @1699442031 {#2028
        date: 2023-11-08 12:13:51.0 +01:00
      }
      +createdAt: DateTimeImmutable @1699396695 {#2029
        date: 2023-11-07 23:38:15.0 +01:00
      }
      +"title": 100108
    }
  ]
  -id: 10491
  -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699365492
  +visibility: "visible             "
  +apId: "https://lemm.ee/post/14024864"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699279092 {#2299
    date: 2023-11-06 14:58:12.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#2463
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463}
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1699361204 {#1735
    date: 2023-11-07 13:46:44.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@bizdelnick@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2465 …}
  +nested: Doctrine\ORM\PersistentCollection {#2422 …}
  +votes: Doctrine\ORM\PersistentCollection {#2458 …}
  +reports: Doctrine\ORM\PersistentCollection {#2456 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
  -id: 98387
  -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5826589"
  +editedAt: DateTimeImmutable @1699403787 {#2448
    date: 2023-11-08 01:36:27.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699361204 {#2411
    date: 2023-11-07 13:46:44.0 +01:00
  }
  +"title": 98387
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#2463
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463}
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1699361204 {#1735
    date: 2023-11-07 13:46:44.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@bizdelnick@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2465 …}
  +nested: Doctrine\ORM\PersistentCollection {#2422 …}
  +votes: Doctrine\ORM\PersistentCollection {#2458 …}
  +reports: Doctrine\ORM\PersistentCollection {#2456 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
  -id: 98387
  -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5826589"
  +editedAt: DateTimeImmutable @1699403787 {#2448
    date: 2023-11-08 01:36:27.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699361204 {#2411
    date: 2023-11-07 13:46:44.0 +01:00
  }
  +"title": 98387
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#2463
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463}
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1699361204 {#1735
    date: 2023-11-07 13:46:44.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@bizdelnick@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2465 …}
  +nested: Doctrine\ORM\PersistentCollection {#2422 …}
  +votes: Doctrine\ORM\PersistentCollection {#2458 …}
  +reports: Doctrine\ORM\PersistentCollection {#2456 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
  -id: 98387
  -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5826589"
  +editedAt: DateTimeImmutable @1699403787 {#2448
    date: 2023-11-08 01:36:27.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699361204 {#2411
    date: 2023-11-07 13:46:44.0 +01:00
  }
  +"title": 98387
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\EntryComment {#1613
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613}
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
  +body: """
    With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
    \n
    You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
    \n
    You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
    \n
    Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 26
  +score: 0
  +lastActive: DateTime @1699355970 {#1528
    date: 2023-11-07 12:19:30.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@Blackmist@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1692 …}
  +nested: Doctrine\ORM\PersistentCollection {#1711 …}
  +votes: Doctrine\ORM\PersistentCollection {#1611 …}
  +reports: Doctrine\ORM\PersistentCollection {#1630 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
  -id: 98211
  -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5824148"
  +editedAt: DateTimeImmutable @1699394504 {#1551
    date: 2023-11-07 23:01:44.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699355970 {#1576
    date: 2023-11-07 12:19:30.0 +01:00
  }
  +"title": 98211
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\EntryComment {#1613
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613}
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
  +body: """
    With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
    \n
    You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
    \n
    You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
    \n
    Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 26
  +score: 0
  +lastActive: DateTime @1699355970 {#1528
    date: 2023-11-07 12:19:30.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@Blackmist@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1692 …}
  +nested: Doctrine\ORM\PersistentCollection {#1711 …}
  +votes: Doctrine\ORM\PersistentCollection {#1611 …}
  +reports: Doctrine\ORM\PersistentCollection {#1630 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
  -id: 98211
  -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5824148"
  +editedAt: DateTimeImmutable @1699394504 {#1551
    date: 2023-11-07 23:01:44.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699355970 {#1576
    date: 2023-11-07 12:19:30.0 +01:00
  }
  +"title": 98211
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\EntryComment {#1613
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613}
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
  +body: """
    With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
    \n
    You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
    \n
    You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
    \n
    Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 26
  +score: 0
  +lastActive: DateTime @1699355970 {#1528
    date: 2023-11-07 12:19:30.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@Blackmist@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1692 …}
  +nested: Doctrine\ORM\PersistentCollection {#1711 …}
  +votes: Doctrine\ORM\PersistentCollection {#1611 …}
  +reports: Doctrine\ORM\PersistentCollection {#1630 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
  -id: 98211
  -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5824148"
  +editedAt: DateTimeImmutable @1699394504 {#1551
    date: 2023-11-07 23:01:44.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699355970 {#1576
    date: 2023-11-07 12:19:30.0 +01:00
  }
  +"title": 98211
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#2470
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470}
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
  +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 34
  +score: 0
  +lastActive: DateTime @1699364043 {#2455
    date: 2023-11-07 14:34:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@Drito@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2467 …}
  +nested: Doctrine\ORM\PersistentCollection {#2371 …}
  +votes: Doctrine\ORM\PersistentCollection {#2370 …}
  +reports: Doctrine\ORM\PersistentCollection {#2360 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
  -id: 98504
  -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5827970"
  +editedAt: DateTimeImmutable @1699403948 {#2459
    date: 2023-11-08 01:39:08.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699364043 {#2468
    date: 2023-11-07 14:34:03.0 +01:00
  }
  +"title": 98504
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#2470
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470}
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
  +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 34
  +score: 0
  +lastActive: DateTime @1699364043 {#2455
    date: 2023-11-07 14:34:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@Drito@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2467 …}
  +nested: Doctrine\ORM\PersistentCollection {#2371 …}
  +votes: Doctrine\ORM\PersistentCollection {#2370 …}
  +reports: Doctrine\ORM\PersistentCollection {#2360 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
  -id: 98504
  -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5827970"
  +editedAt: DateTimeImmutable @1699403948 {#2459
    date: 2023-11-08 01:39:08.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699364043 {#2468
    date: 2023-11-07 14:34:03.0 +01:00
  }
  +"title": 98504
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#2470
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470}
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
  +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 34
  +score: 0
  +lastActive: DateTime @1699364043 {#2455
    date: 2023-11-07 14:34:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@Drito@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2467 …}
  +nested: Doctrine\ORM\PersistentCollection {#2371 …}
  +votes: Doctrine\ORM\PersistentCollection {#2370 …}
  +reports: Doctrine\ORM\PersistentCollection {#2360 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
  -id: 98504
  -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5827970"
  +editedAt: DateTimeImmutable @1699403948 {#2459
    date: 2023-11-08 01:39:08.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699364043 {#2468
    date: 2023-11-07 14:34:03.0 +01:00
  }
  +"title": 98504
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
18 DENIED moderate 
App\Entity\EntryComment {#2384
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384}
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "An app should not be able to access stuff the user did not consent to letting access."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1699367741 {#2386
    date: 2023-11-07 15:35:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2379 …}
  +nested: Doctrine\ORM\PersistentCollection {#2383 …}
  +votes: Doctrine\ORM\PersistentCollection {#1906 …}
  +reports: Doctrine\ORM\PersistentCollection {#1708 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
  -id: 98676
  -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5829871"
  +editedAt: DateTimeImmutable @1699408719 {#2382
    date: 2023-11-08 02:58:39.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699367741 {#2385
    date: 2023-11-07 15:35:41.0 +01:00
  }
  +"title": 98676
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
19 DENIED edit 
App\Entity\EntryComment {#2384
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384}
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "An app should not be able to access stuff the user did not consent to letting access."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1699367741 {#2386
    date: 2023-11-07 15:35:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2379 …}
  +nested: Doctrine\ORM\PersistentCollection {#2383 …}
  +votes: Doctrine\ORM\PersistentCollection {#1906 …}
  +reports: Doctrine\ORM\PersistentCollection {#1708 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
  -id: 98676
  -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5829871"
  +editedAt: DateTimeImmutable @1699408719 {#2382
    date: 2023-11-08 02:58:39.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699367741 {#2385
    date: 2023-11-07 15:35:41.0 +01:00
  }
  +"title": 98676
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
20 DENIED moderate 
App\Entity\EntryComment {#2384
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384}
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "An app should not be able to access stuff the user did not consent to letting access."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1699367741 {#2386
    date: 2023-11-07 15:35:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2379 …}
  +nested: Doctrine\ORM\PersistentCollection {#2383 …}
  +votes: Doctrine\ORM\PersistentCollection {#1906 …}
  +reports: Doctrine\ORM\PersistentCollection {#1708 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
  -id: 98676
  -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5829871"
  +editedAt: DateTimeImmutable @1699408719 {#2382
    date: 2023-11-08 02:58:39.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699367741 {#2385
    date: 2023-11-07 15:35:41.0 +01:00
  }
  +"title": 98676
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
22 DENIED moderate 
App\Entity\EntryComment {#1361
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361}
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1699396327 {#1401
    date: 2023-11-07 23:32:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
    "@stella@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1403 …}
  +nested: Doctrine\ORM\PersistentCollection {#2023 …}
  +votes: Doctrine\ORM\PersistentCollection {#2032 …}
  +reports: Doctrine\ORM\PersistentCollection {#2024 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
  -id: 100078
  -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5845808"
  +editedAt: DateTimeImmutable @1699441630 {#1404
    date: 2023-11-08 12:07:10.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699396327 {#1363
    date: 2023-11-07 23:32:07.0 +01:00
  }
  +"title": 100078
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
23 DENIED edit 
App\Entity\EntryComment {#1361
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361}
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1699396327 {#1401
    date: 2023-11-07 23:32:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
    "@stella@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1403 …}
  +nested: Doctrine\ORM\PersistentCollection {#2023 …}
  +votes: Doctrine\ORM\PersistentCollection {#2032 …}
  +reports: Doctrine\ORM\PersistentCollection {#2024 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
  -id: 100078
  -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5845808"
  +editedAt: DateTimeImmutable @1699441630 {#1404
    date: 2023-11-08 12:07:10.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699396327 {#1363
    date: 2023-11-07 23:32:07.0 +01:00
  }
  +"title": 100078
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
24 DENIED moderate 
App\Entity\EntryComment {#1361
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361}
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1699396327 {#1401
    date: 2023-11-07 23:32:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
    "@stella@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1403 …}
  +nested: Doctrine\ORM\PersistentCollection {#2023 …}
  +votes: Doctrine\ORM\PersistentCollection {#2032 …}
  +reports: Doctrine\ORM\PersistentCollection {#2024 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
  -id: 100078
  -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5845808"
  +editedAt: DateTimeImmutable @1699441630 {#1404
    date: 2023-11-08 12:07:10.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699396327 {#1363
    date: 2023-11-07 23:32:07.0 +01:00
  }
  +"title": 100078
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
26 DENIED moderate 
App\Entity\EntryComment {#2389
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389}
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1699392351 {#1407
    date: 2023-11-07 22:25:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@bizdelnick@lemmy.ml"
    "@owsei@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2387 …}
  +nested: Doctrine\ORM\PersistentCollection {#2394 …}
  +votes: Doctrine\ORM\PersistentCollection {#2393 …}
  +reports: Doctrine\ORM\PersistentCollection {#1381 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
  -id: 99833
  -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5843816"
  +editedAt: DateTimeImmutable @1699437154 {#1883
    date: 2023-11-08 10:52:34.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699392351 {#2391
    date: 2023-11-07 22:25:51.0 +01:00
  }
  +"title": 99833
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
27 DENIED edit 
App\Entity\EntryComment {#2389
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389}
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1699392351 {#1407
    date: 2023-11-07 22:25:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@bizdelnick@lemmy.ml"
    "@owsei@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2387 …}
  +nested: Doctrine\ORM\PersistentCollection {#2394 …}
  +votes: Doctrine\ORM\PersistentCollection {#2393 …}
  +reports: Doctrine\ORM\PersistentCollection {#1381 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
  -id: 99833
  -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5843816"
  +editedAt: DateTimeImmutable @1699437154 {#1883
    date: 2023-11-08 10:52:34.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699392351 {#2391
    date: 2023-11-07 22:25:51.0 +01:00
  }
  +"title": 99833
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
28 DENIED moderate 
App\Entity\EntryComment {#2389
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389}
      0 => App\Entity\EntryComment {#2012
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396695 {#2021
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2013 …}
        +nested: Doctrine\ORM\PersistentCollection {#2035 …}
        +votes: Doctrine\ORM\PersistentCollection {#2036 …}
        +reports: Doctrine\ORM\PersistentCollection {#2144 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
        -id: 100108
        -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5846173"
        +editedAt: DateTimeImmutable @1699442031 {#2028
          date: 2023-11-08 12:13:51.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396695 {#2029
          date: 2023-11-07 23:38:15.0 +01:00
        }
        +"title": 100108
      }
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
  +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1699392351 {#1407
    date: 2023-11-07 22:25:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@bizdelnick@lemmy.ml"
    "@owsei@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2387 …}
  +nested: Doctrine\ORM\PersistentCollection {#2394 …}
  +votes: Doctrine\ORM\PersistentCollection {#2393 …}
  +reports: Doctrine\ORM\PersistentCollection {#1381 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
  -id: 99833
  -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5843816"
  +editedAt: DateTimeImmutable @1699437154 {#1883
    date: 2023-11-08 10:52:34.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699392351 {#2391
    date: 2023-11-07 22:25:51.0 +01:00
  }
  +"title": 99833
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
30 DENIED moderate 
App\Entity\EntryComment {#2012
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012}
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1699396695 {#2021
    date: 2023-11-07 23:38:15.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2013 …}
  +nested: Doctrine\ORM\PersistentCollection {#2035 …}
  +votes: Doctrine\ORM\PersistentCollection {#2036 …}
  +reports: Doctrine\ORM\PersistentCollection {#2144 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
  -id: 100108
  -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5846173"
  +editedAt: DateTimeImmutable @1699442031 {#2028
    date: 2023-11-08 12:13:51.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699396695 {#2029
    date: 2023-11-07 23:38:15.0 +01:00
  }
  +"title": 100108
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
31 DENIED edit 
App\Entity\EntryComment {#2012
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012}
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1699396695 {#2021
    date: 2023-11-07 23:38:15.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2013 …}
  +nested: Doctrine\ORM\PersistentCollection {#2035 …}
  +votes: Doctrine\ORM\PersistentCollection {#2036 …}
  +reports: Doctrine\ORM\PersistentCollection {#2144 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
  -id: 100108
  -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5846173"
  +editedAt: DateTimeImmutable @1699442031 {#2028
    date: 2023-11-08 12:13:51.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699396695 {#2029
    date: 2023-11-07 23:38:15.0 +01:00
  }
  +"title": 100108
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
32 DENIED moderate 
App\Entity\EntryComment {#2012
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1718
    +user: App\Entity\User {#265 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2092 …}
    +slug: "If-only-more-Linux-programs-followed-sandboxing-best-practices"
    +title: "If only more Linux programs followed sandboxing best practices..."
    +url: "https://i.imgur.com/mfkIRZl.png"
    +body: null
    +type: "image"
    +lang: "en"
    +isOc: false
    +hasEmbed: true
    +commentCount: 95
    +favouriteCount: 574
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699609651 {#2077
      date: 2023-11-10 10:47:31.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2218 …}
    +votes: Doctrine\ORM\PersistentCollection {#2208 …}
    +reports: Doctrine\ORM\PersistentCollection {#2268 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2239 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2249 …}
    +badges: Doctrine\ORM\PersistentCollection {#2251 …}
    +children: [
      5 => App\Entity\EntryComment {#2463
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "This could well be an advanced video editor or an office suite if they take full advantage of the portals API without losing any functionality. Well, they can have the network permission, it would still be safe anyway."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1699361204 {#1735
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2465 …}
        +nested: Doctrine\ORM\PersistentCollection {#2422 …}
        +votes: Doctrine\ORM\PersistentCollection {#2458 …}
        +reports: Doctrine\ORM\PersistentCollection {#2456 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2453 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2457 …}
        -id: 98387
        -bodyTs: "'advanc':6 'advantag':17 'anyway':38 'api':21 'could':2 'editor':8 'full':16 'function':25 'lose':23 'network':31 'offic':11 'permiss':32 'portal':20 'safe':37 'still':35 'suit':12 'take':15 'video':7 'well':3,26 'without':22 'would':34"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5826589"
        +editedAt: DateTimeImmutable @1699403787 {#2448
          date: 2023-11-08 01:36:27.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699361204 {#2411
          date: 2023-11-07 13:46:44.0 +01:00
        }
        +"title": 98387
      }
      6 => App\Entity\EntryComment {#1613
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1691 …}
        +body: """
          With a bit of modifying code to use the color picker and maybe rearranging the workflow to adapt to the new system, apps as advanced as DaVinci Resolve and LibreOffice can have permissions as restrictive as this (the network permission would of course may be needed but it would still be marked as Safe by Flathub).\n
          \n
          You can use the file picker API to open the files or folders your app would need to access while having no filesystem permissions at all. You can access the camera, microphone, and GPS without the user devices portal, by simply using the respective portals where the user has the power to allow or deny access to such devices as they wish.\n
          \n
          You can record the screen, take a screenshot, and pick a color in the screen by simply calling the proper portals, with the bonus that the user will be able to select if they want the entire screen, a specific window, or a specific area to be recorded/captured and whether the cursor should be shown or not.\n
          \n
          Heck, even TeamViewer can be as this restricted without losing any functionality if they use the Screen Cast portal which allows apps to mirror input from a remote device! They would of course need the network permission, but that’s still safe.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 26
        +score: 0
        +lastActive: DateTime @1699355970 {#1528
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Blackmist@feddit.uk"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1692 …}
        +nested: Doctrine\ORM\PersistentCollection {#1711 …}
        +votes: Doctrine\ORM\PersistentCollection {#1611 …}
        +reports: Doctrine\ORM\PersistentCollection {#1630 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1729 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1680 …}
        -id: 98211
        -bodyTs: "'abl':148 'access':75,85,112 'adapt':18 'advanc':25 'allow':109,196 'api':63 'app':23,71,197 'area':163 'bit':3 'bonus':142 'call':136 'camera':87 'cast':193 'code':6 'color':10,130 'cours':43,208 'cursor':170 'davinci':27 'deni':111 'devic':94,115,204 'entir':155 'even':177 'file':61,67 'filesystem':79 'flathub':56 'folder':69 'function':187 'gps':90 'heck':176 'input':200 'libreoffic':30 'lose':185 'mark':52 'may':44 'mayb':13 'microphon':88 'mirror':199 'modifi':5 'need':46,73,209 'network':39,211 'new':21 'open':65 'permiss':33,40,80,212 'pick':128 'picker':11,62 'portal':95,101,139,194 'power':107 'proper':138 'rearrang':14 'record':121 'recorded/captured':166 'remot':203 'resolv':28 'respect':100 'restrict':35,183 'safe':54,217 'screen':123,133,156,192 'screenshot':126 'select':150 'shown':173 'simpli':97,135 'specif':158,162 'still':50,216 'system':22 'take':124 'teamview':178 'use':8,59,98,190 'user':93,104,145 'want':153 'whether':168 'window':159 'wish':118 'without':91,184 'workflow':16 'would':41,49,72,206"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5824148"
        +editedAt: DateTimeImmutable @1699394504 {#1551
          date: 2023-11-07 23:01:44.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699355970 {#1576
          date: 2023-11-07 12:19:30.0 +01:00
        }
        +"title": 98211
      }
      4 => App\Entity\EntryComment {#2470
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2469 …}
        +body: "As well as FOSS too. Sandboxing is a security standard that should be followed by every software how open their code may be."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 34
        +score: 0
        +lastActive: DateTime @1699364043 {#2455
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@Drito@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2467 …}
        +nested: Doctrine\ORM\PersistentCollection {#2371 …}
        +votes: Doctrine\ORM\PersistentCollection {#2370 …}
        +reports: Doctrine\ORM\PersistentCollection {#2360 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2361 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2372 …}
        -id: 98504
        -bodyTs: "'code':21 'everi':16 'follow':14 'foss':4 'may':22 'open':19 'sandbox':6 'secur':9 'softwar':17 'standard':10 'well':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5827970"
        +editedAt: DateTimeImmutable @1699403948 {#2459
          date: 2023-11-08 01:39:08.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699364043 {#2468
          date: 2023-11-07 14:34:03.0 +01:00
        }
        +"title": 98504
      }
      3 => App\Entity\EntryComment {#2384
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "An app should not be able to access stuff the user did not consent to letting access."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 16
        +score: 0
        +lastActive: DateTime @1699367741 {#2386
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2379 …}
        +nested: Doctrine\ORM\PersistentCollection {#2383 …}
        +votes: Doctrine\ORM\PersistentCollection {#1906 …}
        +reports: Doctrine\ORM\PersistentCollection {#1708 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1410 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
        -id: 98676
        -bodyTs: "'abl':6 'access':8,17 'app':2 'consent':14 'let':16 'stuff':9 'user':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5829871"
        +editedAt: DateTimeImmutable @1699408719 {#2382
          date: 2023-11-08 02:58:39.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699367741 {#2385
          date: 2023-11-07 15:35:41.0 +01:00
        }
        +"title": 98676
      }
      2 => App\Entity\EntryComment {#1361
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1362 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
        +body: "The file picker API is there to allow apps to access and save files with the user’s consent, while bot having any filesystem access. So a properly sandboxed app would be able to open, edit, and save files wherever the user wants, while not having access to any other irrelevant files, such as your .bashrc or memes folder."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1699396327 {#1401
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@MonkderZweite@feddit.ch"
          "@stella@lemm.ee"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1403 …}
        +nested: Doctrine\ORM\PersistentCollection {#2023 …}
        +votes: Doctrine\ORM\PersistentCollection {#2032 …}
        +reports: Doctrine\ORM\PersistentCollection {#2024 …}
        +favourites: Doctrine\ORM\PersistentCollection {#2018 …}
        +notifications: Doctrine\ORM\PersistentCollection {#2011 …}
        -id: 100078
        -bodyTs: "'abl':33 'access':11,25,47 'allow':8 'api':4 'app':9,30 'bashrc':56 'bot':21 'consent':19 'edit':36 'file':2,14,39,52 'filesystem':24 'folder':59 'irrelev':51 'meme':58 'open':35 'picker':3 'proper':28 'sandbox':29 'save':13,38 'user':17,42 'want':43 'wherev':40 'would':31"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5845808"
        +editedAt: DateTimeImmutable @1699441630 {#1404
          date: 2023-11-08 12:07:10.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699396327 {#1363
          date: 2023-11-07 23:32:07.0 +01:00
        }
        +"title": 100078
      }
      1 => App\Entity\EntryComment {#2389
        +user: App\Entity\User {#265 …}
        +entry: Proxies\__CG__\App\Entity\Entry {#1718 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#2369 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1707 …}
        +body: "As I mentioned in my previous comment, they use the [portals API](https://docs.flatpak.org/en/latest/portal-api-reference.html) to access and save files."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 5
        +score: 0
        +lastActive: DateTime @1699392351 {#1407
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@IverCoder@lemm.ee"
          "@bizdelnick@lemmy.ml"
          "@owsei@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#2387 …}
        +nested: Doctrine\ORM\PersistentCollection {#2394 …}
        +votes: Doctrine\ORM\PersistentCollection {#2393 …}
        +reports: Doctrine\ORM\PersistentCollection {#1381 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1402 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1385 …}
        -id: 99833
        -bodyTs: "'/en/latest/portal-api-reference.html)':15 'access':17 'api':12 'comment':7 'docs.flatpak.org':14 'docs.flatpak.org/en/latest/portal-api-reference.html)':13 'file':20 'mention':3 'portal':11 'previous':6 'save':19 'use':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemm.ee/comment/5843816"
        +editedAt: DateTimeImmutable @1699437154 {#1883
          date: 2023-11-08 10:52:34.0 +01:00
        }
        +createdAt: DateTimeImmutable @1699392351 {#2391
          date: 2023-11-07 22:25:51.0 +01:00
        }
        +"title": 99833
      }
      0 => App\Entity\EntryComment {#2012}
    ]
    -id: 10491
    -titleTs: "'best':8 'follow':6 'linux':4 'practic':9 'program':5 'sandbox':7"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699365492
    +visibility: "visible             "
    +apId: "https://lemm.ee/post/14024864"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699279092 {#2299
      date: 2023-11-06 14:58:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2020 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2378 …}
  +body: "Well, no matter how I trust my photo editing app, it has no business accessing my thesis documents. Proper filesystem sandboxing does security properly."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1699396695 {#2021
    date: 2023-11-07 23:38:15.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@IverCoder@lemm.ee"
    "@MonkderZweite@feddit.ch"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2013 …}
  +nested: Doctrine\ORM\PersistentCollection {#2035 …}
  +votes: Doctrine\ORM\PersistentCollection {#2036 …}
  +reports: Doctrine\ORM\PersistentCollection {#2144 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2061 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2084 …}
  -id: 100108
  -bodyTs: "'access':15 'app':10 'busi':14 'document':18 'edit':9 'filesystem':20 'matter':3 'photo':8 'proper':19,24 'sandbox':21 'secur':23 'thesi':17 'trust':6 'well':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/5846173"
  +editedAt: DateTimeImmutable @1699442031 {#2028
    date: 2023-11-08 12:13:51.0 +01:00
  }
  +createdAt: DateTimeImmutable @1699396695 {#2029
    date: 2023-11-07 23:38:15.0 +01:00
  }
  +"title": 100108
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
34 DENIED moderate 
App\Entity\Entry {#1428
  +user: App\Entity\User {#265 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1646 …}
  +slug: "Vanilla-OS-2-Orchid-will-be-released-very-soon"
  +title: "Vanilla OS 2 Orchid will be released "very soon""
  +url: "https://discord.com/channels/1023243680829681704/1023246422251950230/1171206212159807649"
  +body: """
    Original message from the Vanilla OS Discord announcment, from @mirkob1:\n
    \n
    > For those asking for Vanilla OS 2 Orchid’s release date, the simple answer is: soon, very soon.\n
    > \n
    > While the full one is: please let us work with no rush, Orchid has a complex structure, introduces new paradigms and we want to be sure that everything works the best before releasing.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 12
  +favouriteCount: 50
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699409134 {#1444
    date: 2023-11-08 03:05:34.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: [
    "@mirkob1"
  ]
  +comments: Doctrine\ORM\PersistentCollection {#1647 …}
  +votes: Doctrine\ORM\PersistentCollection {#1640 …}
  +reports: Doctrine\ORM\PersistentCollection {#1665 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1578 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1593 …}
  +badges: Doctrine\ORM\PersistentCollection {#1573 …}
  +children: []
  -id: 10855
  -titleTs: "'2':3 'orchid':4 'os':2 'releas':7 'soon':9 'vanilla':1"
  -bodyTs: "'2':17 'announc':8 'answer':24 'ask':13 'best':59 'complex':44 'date':21 'discord':7 'everyth':56 'full':31 'introduc':46 'let':35 'messag':2 'mirkob1':10 'new':47 'one':32 'orchid':18,41 'origin':1 'os':6,16 'paradigm':48 'pleas':34 'releas':20,61 'rush':40 'simpl':23 'soon':26,28 'structur':45 'sure':54 'us':36 'vanilla':5,15 'want':51 'work':37,57"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699447354
  +visibility: "visible             "
  +apId: "https://lemm.ee/post/14125536"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699360954 {#1465
    date: 2023-11-07 13:42:34.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
35 DENIED edit 
App\Entity\Entry {#1428
  +user: App\Entity\User {#265 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1646 …}
  +slug: "Vanilla-OS-2-Orchid-will-be-released-very-soon"
  +title: "Vanilla OS 2 Orchid will be released "very soon""
  +url: "https://discord.com/channels/1023243680829681704/1023246422251950230/1171206212159807649"
  +body: """
    Original message from the Vanilla OS Discord announcment, from @mirkob1:\n
    \n
    > For those asking for Vanilla OS 2 Orchid’s release date, the simple answer is: soon, very soon.\n
    > \n
    > While the full one is: please let us work with no rush, Orchid has a complex structure, introduces new paradigms and we want to be sure that everything works the best before releasing.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 12
  +favouriteCount: 50
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699409134 {#1444
    date: 2023-11-08 03:05:34.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: [
    "@mirkob1"
  ]
  +comments: Doctrine\ORM\PersistentCollection {#1647 …}
  +votes: Doctrine\ORM\PersistentCollection {#1640 …}
  +reports: Doctrine\ORM\PersistentCollection {#1665 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1578 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1593 …}
  +badges: Doctrine\ORM\PersistentCollection {#1573 …}
  +children: []
  -id: 10855
  -titleTs: "'2':3 'orchid':4 'os':2 'releas':7 'soon':9 'vanilla':1"
  -bodyTs: "'2':17 'announc':8 'answer':24 'ask':13 'best':59 'complex':44 'date':21 'discord':7 'everyth':56 'full':31 'introduc':46 'let':35 'messag':2 'mirkob1':10 'new':47 'one':32 'orchid':18,41 'origin':1 'os':6,16 'paradigm':48 'pleas':34 'releas':20,61 'rush':40 'simpl':23 'soon':26,28 'structur':45 'sure':54 'us':36 'vanilla':5,15 'want':51 'work':37,57"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699447354
  +visibility: "visible             "
  +apId: "https://lemm.ee/post/14125536"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699360954 {#1465
    date: 2023-11-07 13:42:34.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
36 DENIED moderate 
App\Entity\Entry {#1428
  +user: App\Entity\User {#265 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1649 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1646 …}
  +slug: "Vanilla-OS-2-Orchid-will-be-released-very-soon"
  +title: "Vanilla OS 2 Orchid will be released "very soon""
  +url: "https://discord.com/channels/1023243680829681704/1023246422251950230/1171206212159807649"
  +body: """
    Original message from the Vanilla OS Discord announcment, from @mirkob1:\n
    \n
    > For those asking for Vanilla OS 2 Orchid’s release date, the simple answer is: soon, very soon.\n
    > \n
    > While the full one is: please let us work with no rush, Orchid has a complex structure, introduces new paradigms and we want to be sure that everything works the best before releasing.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 12
  +favouriteCount: 50
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699409134 {#1444
    date: 2023-11-08 03:05:34.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: [
    "@mirkob1"
  ]
  +comments: Doctrine\ORM\PersistentCollection {#1647 …}
  +votes: Doctrine\ORM\PersistentCollection {#1640 …}
  +reports: Doctrine\ORM\PersistentCollection {#1665 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1578 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1593 …}
  +badges: Doctrine\ORM\PersistentCollection {#1573 …}
  +children: []
  -id: 10855
  -titleTs: "'2':3 'orchid':4 'os':2 'releas':7 'soon':9 'vanilla':1"
  -bodyTs: "'2':17 'announc':8 'answer':24 'ask':13 'best':59 'complex':44 'date':21 'discord':7 'everyth':56 'full':31 'introduc':46 'let':35 'messag':2 'mirkob1':10 'new':47 'one':32 'orchid':18,41 'origin':1 'os':6,16 'paradigm':48 'pleas':34 'releas':20,61 'rush':40 'simpl':23 'soon':26,28 'structur':45 'sure':54 'us':36 'vanilla':5,15 'want':51 'work':37,57"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699447354
  +visibility: "visible             "
  +apId: "https://lemm.ee/post/14125536"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699360954 {#1465
    date: 2023-11-07 13:42:34.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_ADMIN 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
38 DENIED ROLE_MODERATOR 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details