access_control:
    - { role: ROLE_USER,requires_channel: https }
    - { role: IS_AUTHENTICATED_ANONYMOUSLY,requires_channel: http }

但是,不……我认为这将是一个非常好的功能.

在这种情况下,我们可以使用内核事件与请求侦听器一起破解：

namespace YourBundle\EventListener;

use Symfony\component\HttpKernel\Event\GetResponseEvent;
use Symfony\Component\HttpFoundation\redirectResponse;

class RequestListener
{
    public function onKernelRequest(GetResponseEvent $event)
    {
        $request = $event->getRequest();

        // force ssl based on authentication
        if ($this->container->get('security.context')->isGranted('IS_AUTHENTICATED_FULLY')) {
            if (!$request->isSecure()) {
                $request->server->set('HTTPS',true);
                $request->server->set('SERVER_PORT',443);
                $event->setResponse(new RedirectResponse($request->getUri()));
            } 
        } else {
            if ($request->isSecure()) {
                $request->server->set('HTTPS',false);
                $request->server->set('SERVER_PORT',80);
                $event->setResponse(new RedirectResponse($request->getUri()));
            }
        }
    }
}

在服务的config.yML中定义你的监听器：

myapp.request.listener:
    class: MyApp\MyBundle\EventListener\RequestListener
    tags:
        - { name: kernel.event_listener,event: kernel.request }

有关事件等的详细信息,请参阅Symfony Internals.