在Yii 2.0中將自定義RBAC規則添加到PhpManager

Question

我想在Yii 2.0中向PhpManager RBAC添加自定義規則。

這是自定義規則（@ app / rbac / OwnerRule.php）：

<?php

namespace app\rbac;

use yii\rbac\Rule;

/**
 * Checks if userID matches user passed via params
 */
class OwnerRule extends Rule
{
    public $name = 'isOwner';

    public function execute($user, $item, $params)
    {
        $access = false;
        if(isset($params['id'])){ 
            // My custom logic used to set $access
        }

        return $access;
    }
}

這是RBAC層次結構文件（@ app / data / rbac.php）

<?php
use yii\rbac\Item;

return [
    'manageThing0' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'bizRule' => NULL, 'data' => NULL],
    'manageThing1' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'bizRule' => NULL, 'data' => NULL],
    'manageThing2' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'bizRule' => NULL, 'data' => NULL],

    // AND THE ROLES
    'guest' => [
        'type' => Item::TYPE_ROLE,
        'description' => 'Guest',
        'bizRule' => NULL,
        'data' => NULL
    ],

    'user' => [
        'type' => Item::TYPE_ROLE,
        'description' => 'User',
        'children' => [
            'guest',
            'manageThing0', // User can edit thing0
        ],
        'bizRule' => 'return !Yii::$app->user->isGuest;',
        'data' => NULL
    ],

    'moderator' => [
        'type' => Item::TYPE_ROLE,
        'description' => 'Moderator',
        'children' => [
            'user',         // Can manage all that user can
            'manageThing1', // and also thing1
        ],
        'bizRule' => NULL,
        'data' => NULL
    ],

    'admin' => [
        'type' => Item::TYPE_ROLE,
        'description' => 'Admin',
        'children' => [
            'moderator',    // can do all the stuff that moderator can
            'manageThing2', // and also manage thing2
        ],
        'bizRule' => NULL,
        'data' => NULL
    ],

]; 

如何在層次結構文件中使用我的自定義規則？

Answer 1

看到這些鏈接，希望您能找到想要的東西，

http://www.yiiframework.com/doc-2.0/guide-security-authorization.html

http://yii2-user.dmeroff.ru/docs/custom-access-control

RBAC用於基本yii2模板