Passing multiple attributes to isGranted() has been removed in #33584, so the following doesn't work any more:

#[IsGranted(attributes: ['ROLE_ADMIN'])]
public function index(Post $post)
{
}

#[IsGranted(attributes: ['ROLE_USER', 'ROLE_ADMIN'])]
public function index(Post $post)
{
}

As mentioned in sensiolabs/SensioFrameworkExtraBundle#648 , expressions should be used instead, see #46978 . This PR removes the possibility of using multiple attributes with #[IsGranted].

Also, it's currently possible to use #[IsGranted()] with no attributes (null). Since this doesn't seem to work either, nor can I find a reason why it even should, this PR removes that option as well. If I'm wrong about this one, please let me know.