Yii2-验证main.php文件中模型的字段

Question

I have a table called user, and inside it a field called estatuto.

Only users with estatuto == admin can see Admin hyperlink in my NavBar widget located in main.php file.

My problem is to check in:

'label' => 'Admin', 'visible' => !Yii::$app->user->isGuest,

if a user is logged with estatuto == admin, and only in that condition show the admin hyperlink.

I can only check if a user is Guest or not Guest.

I need something like:

'label' => 'Admin', 'visible' => !Yii::$app->user->isGuest && User::estatuto = 'admin',

I searched a lot and the only thing i saw and couldn't understand was through:

$this->view->params['customParam'] = 'customValue';

But maybe there's another aproach.

Anyone can help me solve this problem?

Answer 1

Your task is not about validating model field, it is classical permission management task. So you should use Yii2 RBAC feature. in that case you can check permission like that:

\Yii::$app->user->can('viewAdminMenu')

Answer 2

Store the value of estatuto in session when the user logs in.

Then at any point just call that value from session.

Also don't set the visible tag for access. You need to not show the entire link if not admin. Also hiding just links is not enough, you need to check for access within the controller as well.

A better way to do this is use Role Based Access Control or RBAC.