Fix build with Symfony 4.3

composer.json

@@ -82,7 +82,8 @@
     },
     "conflict": {
         "doctrine/common": "<2.7",
-        "doctrine/mongodb-odm": "<2.0"
+        "doctrine/mongodb-odm": "<2.0",
+        "symfony/messenger": ">=4.3"
     },
     "suggest": {
         "doctrine/mongodb-odm-bundle": "To support MongoDB. Only versions 4.0 and later are supported.",

src/Security/ResourceAccessChecker.php

@@ -67,17 +67,33 @@ public function isGranted(string $resourceClass, string $expression, array $extr
      */
     private function getVariables(TokenInterface $token): array
     {
-        $roles = $this->roleHierarchy ? $this->roleHierarchy->getReachableRoles($token->getRoles()) : $token->getRoles();
-
         return [
             'token' => $token,
             'user' => $token->getUser(),
-            'roles' => array_map(function (Role $role) {
-                return $role->getRole();
-            }, $roles),
+            'roles' => $this->getEffectiveRoles($token),
             'trust_resolver' => $this->authenticationTrustResolver,
             // needed for the is_granted expression function
             'auth_checker' => $this->authorizationChecker,
         ];
     }
+
+    /**
+     * @return string[]
+     */
+    private function getEffectiveRoles(TokenInterface $token): array
+    {
+        $explicitRoles = $token->getRoles();
+
+        if (null === $this->roleHierarchy) {
+            return $explicitRoles;
+        }
+
+        if (method_exists($this->roleHierarchy, 'getReachableRoleNames')) {
+            return $this->roleHierarchy->getReachableRoleNames($explicitRoles);
+        }
+
+        return array_map(function (Role $role): string {
+            return $role->getRole();
+        }, $this->roleHierarchy->getReachableRoles($explicitRoles));
+    }
 }

tests/Security/EventListener/DenyAccessListenerTest.php

@@ -269,7 +269,7 @@ private function getLegacyListener(ResourceMetadataFactoryInterface $resourceMet
         $authenticationTrustResolverProphecy = $this->prophesize(AuthenticationTrustResolverInterface::class);
 
         $roleHierarchyInterfaceProphecy = $this->prophesize(RoleHierarchyInterface::class);
-        $roleHierarchyInterfaceProphecy->getReachableRoles(Argument::type('array'))->willReturn([]);
+        $roleHierarchyInterfaceProphecy->{method_exists(RoleHierarchyInterface::class, 'getReachableRoleNames') ? 'getReachableRoleNames' : 'getReachableRoles'}(Argument::type('array'))->willReturn([]);
 
         $tokenProphecy = $this->prophesize(TokenInterface::class);
         $tokenProphecy->getUser()->willReturn('anon.');