Added a checkAccess example [skip ci]

docs/guide-es/rest-controllers.md

@@ -143,6 +143,10 @@ public function checkAccess($action, $model = null, $params = [])
 {
     // check if the user can access $action and $model
     // throw ForbiddenHttpException if access should be denied
+    if ($action === 'update' || $action === 'delete') {
+        if ($model->author_id !== \Yii::$app->user->id)
+            throw new \yii\web\ForbiddenHttpException(sprintf('You can only %s articles that you\'ve created.', $action));
+    }
 }
 ```
 

docs/guide-ja/rest-controllers.md

@@ -172,6 +172,10 @@ public function checkAccess($action, $model = null, $params = [])
 {
     // ユーザが $action と $model に対する権限を持つかどうかをチェック
     // アクセスを拒否すべきときは ForbiddenHttpException を投げる
+    if ($action === 'update' || $action === 'delete') {
+        if ($model->author_id !== \Yii::$app->user->id)
+            throw new \yii\web\ForbiddenHttpException(sprintf('You can only %s articles that you\'ve created.', $action));
+    }
 }
 ```
 

docs/guide-pt-BR/rest-controllers.md

@@ -120,6 +120,10 @@ public function checkAccess($action, $model = null, $params = [])
 {
    // verifica se o usuário pode acessar $action and $model
    // lança a ForbiddenHttpException se o acesso for negado
+   if ($action === 'update' || $action === 'delete') {
+        if ($model->author_id !== \Yii::$app->user->id)
+            throw new \yii\web\ForbiddenHttpException(sprintf('You can only %s articles that you\'ve created.', $action));
+    }
 }
 ```
 

docs/guide-ru/rest-controllers.md

@@ -144,6 +144,10 @@ public function checkAccess($action, $model = null, $params = [])
 {
     // проверить, имеет ли пользователь доступ к $action и $model
     // выбросить ForbiddenHttpException, если доступ следует запретить
+    if ($action === 'update' || $action === 'delete') {
+        if ($model->author_id !== \Yii::$app->user->id)
+            throw new \yii\web\ForbiddenHttpException(sprintf('You can only %s articles that you\'ve created.', $action));
+    }
 }
 ```
 

docs/guide-zh-CN/rest-controllers.md

@@ -134,6 +134,10 @@ public function checkAccess($action, $model = null, $params = [])
 {
     // 检查用户能否访问 $action 和 $model
     // 访问被拒绝应抛出ForbiddenHttpException 
+    if ($action === 'update' || $action === 'delete') {
+        if ($model->author_id !== \Yii::$app->user->id)
+            throw new \yii\web\ForbiddenHttpException(sprintf('You can only %s articles that you\'ve created.', $action));
+    }
 }
 ```
 

docs/guide/rest-controllers.md

@@ -178,6 +178,10 @@ public function checkAccess($action, $model = null, $params = [])
 {
     // check if the user can access $action and $model
     // throw ForbiddenHttpException if access should be denied
+    if ($action === 'update' || $action === 'delete') {
+        if ($model->author_id !== \Yii::$app->user->id)
+            throw new \yii\web\ForbiddenHttpException(sprintf('You can only %s articles that you\'ve created.', $action));
+    }
 }
 ```