Challenge 1 / 1

Our SuperAdminVoter would happily say yes to any attribute for a super admin. Why does IS_AUTHENTICATED_FULLY have to be in EXCLUSIONS?

Otherwise a super admin browsing on just a remember-me cookie would pass the sudo-mode check without ever re-entering their password.

Those attributes are reserved - Symfony ignores custom voters that return true for them.

AuthenticatedVoter throws an exception if another voter also votes on its attributes.

The voter would recurse, since deciding IS_AUTHENTICATED_FULLY kicks off another access decision.