title: How to protect api plateform operations with privileges
body: <p>I have an api plateform project (symfony) that contain an entity User with column Roles(array), I have 3 ROLES: ROLE_USER, ROLE_COMMERCIAL, ROLE_ADMIN, I am protecting my operations likes this:</p>
  <pre class="lang-php prettyprint-override"><code>&quot;get&quot;={
       &quot;access_control&quot;=&quot;is_granted('ROLE_ADMIN')&quot;,
       &quot;security_post_denormalize_message&quot;=&quot;Sorry, Only admins can View Users List&quot;
  }
  </code></pre>
  <p>But What I would to achieve is to give each user privileges like for example a user can view users list but cannot edit it , I want to edit the privileges for each user later that's why I don't want to use the role column. I think of this tables structure :</p>
  <ul>
  <li>User(id,user_name,role_id)</li>
  <li>Role(role_id,role_name)</li>
  <li>Privilege(id,priv_name, role_id)</li>
  </ul>