php/yii2
1
0
Fork 0
mirror of https://github.com/yiisoft/yii2.git synced 2025-12-16 20:47:32 +08:00
Code Issues Packages Projects Releases Wiki Activity

Сheck if user is authenticated in RBAC UserGroupRule.

Browse Source
This commit is contained in:
vova07
2014-05-02 11:11:36 +03:00
parent 0880656be3
commit 2098c6243f
1 changed files with 10 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
docs/guide/security-authorization.md
View File

@@ -181,7 +181,7 @@ more special *tree* hierarchy. While a role can contain a permission, it is not
### Configuring RBAC Manager ### Configuring RBAC Manager
Before we set off to define authorization data and perform access checking, we need to configure the Before we set off to define authorization data and perform access checking, we need to configure the
[[yii\base\Application::authManager|authManager]] application component. Yii provides two types of authorization managers: [[yii\base\Application::authManager|authManager]] application component. Yii provides two types of authorization managers:
[[yii\rbac\PhpManager]] and [[yii\rbac\DbManager]]. The former uses a PHP script file to store authorization [[yii\rbac\PhpManager]] and [[yii\rbac\DbManager]]. The former uses a PHP script file to store authorization
data, while the latter stores authorization data in database. You may consider using the former if your application data, while the latter stores authorization data in database. You may consider using the former if your application
does not require very dynamic role and permission management. does not require very dynamic role and permission management.
@@ -416,6 +416,7 @@ You can create set up the RBAC data as follows,
```php ```php
namespace app\rbac; namespace app\rbac;
use Yii;
use yii\rbac\Rule; use yii\rbac\Rule;
/** /**
@@ -427,14 +428,15 @@ class UserGroupRule extends Rule
public function execute($user, $item, $params) public function execute($user, $item, $params)
{ {
$group = \Yii::$app->user->identity->group; if (!Yii::$app->user->isGuest) {
if ($item->name === 'admin') { $group = Yii::$app->user->identity->group;
return $group == 1; if ($item->name === 'admin') {
} elseif ($item->name === 'author') { return $group == 1;
return $group == 1 || $group == 2; } elseif ($item->name === 'author') {
} else { return $group == 1 || $group == 2;
return false; }
} }
return false;
} }
} }