rights

Hi,

Hopefully, it's just me being dum.

I've created Roles, Tasks and Operations, its working!

If I then go and change a name of a role for example, the change isn't being applied in the database...

Find if you never want to change anything - but perhaps someone can either supply a patch - or tell me what I've not done right lol

p

great job really love it!

i am working with framework yii-1.1.9.r3527, with no additional plugins installed.. on the first run needed to add an entry in the authitem and authassignment db tables.

modified the Controller.php in the protected/components directory
"class Controller extends RController"

and added another function public function filterAccessControl($filterChain) { $filter = new RightsFilter; $filter->allowedActions = $this->allowedActions(); $filter->filter($filterChain); }

now its working perfectly, the documentation is missing these stuff!

Jerome Nicholas Programmer/Analyst http://shalomsoftware.com.au/

Either you

1. prefix your admin (or frontend) controllers
2. OR your actions name must be unique for the same controller name.

There is no better solution without hacking rights. I am going with number 2 and for small project it is fine.

Hi all, i'm using Rights v1.3.0 and i have next module structure

controllers/PageController.php
controllers/admin/PageController.php

Rights module generates rights only for controllers/admin/PageController.php? So, currently Rights module doesnt support not uniqiue names for controllers? Has anyone same problem? How to fix it?

Such a good module, Thank you very much!

The only problem is that it's very difficult to find it through Google.

Better than any other Yii RBAC manager!

You can add the multiselect by themeing.

Wow man. Rights totally deserves that. Congratulations!

Hello, When user is logged as superuser and log on to other account without logout then user is still superuser,

Just started using this module and like it... moving from srbac. It would be nice to change the drop-down list for assigning operations to tasks to a multi-select list box. Then you'd have the ability to select multiple operations for one task and click Add just once.

Thanks for the good work Chris

I tested the rights module with the yii 1.8 blog demo and forgot that the UserIdentity returns the "username" for Yii::app()->user->getId().

because the blog demo has only an array for authenticate. Guess this is the problem which others also have if they install the rights module in their "test applications".

i found this after i tried to add the "admin" superuser role to another account. which failed every time.

So it works with yii 1.8 it just doesn't work from scratch in the yii blog demo cause of the missing user data.

@horizons $userIdList is an array that holds the ids of the users with superuser access, so the current condition is the right one.

@paejan I'm currently using Rights with Yii 1.18 and it works without a hitch.

Seems to check for user even when "install" is true and you're logged in. It throws:

Error: code=403, message=There must be at least one superuser!

If I temporarily comment out line 305:

throw new CHttpException(403, Rights::t('core', 'There must be at least one superuser!'));

Then install it, then uncomment, it works just fine.

Here is my simple example to allow only the owner of an blog post to view, update and delete. In my example Post has a propery 'user_id' which is the value of the owning user.

In your PostController:

public function filters() {
        return array(
                        'accessOwn + view, update, delete',                        
                        'rights',
        );
    }
 
    public function filterAccessOwn($filterChain)
    {
        $post=$this->loadModel($_GET['id'], 'Post');
        if(Yii::app()->user->checkAccess('Post.AccessOwn', array('userid'=>$post->user_id)))
        $filterChain->removeAt(1);
        $filterChain->run();
    }

In rights define following operation:

Name: Post.AccessOwn
Description: Post.AccessOwn
Rule: return Yii::app()->user->id==$params["userid"];

To limit access to browsable posts (i.e. on the default index action), you can do something like following in your PostController:

public function actionIndex() {
        $dataProvider = new CActiveDataProvider('Post');
        if (!Yii::app()->user->isSuperuser) {
            $dataProvider->setCriteria(array(   
                'condition' => 'user_id=:user_id',
                'params' => array(':user_id' => Yii::app()->user->id), 
            ));
        }
        $this->render('index', array(
            'dataProvider' => $dataProvider,
        ));
    }

I think exporting/importing Roles/Operations/Tasks would be a great tool to make it easier to manage roles etc. across code updates. Do you plan this feature? If not - maybe, let's discuss it and we'll help code it \m/

While installing, I got this error: include(User.php) [function.include]: failed to open stream: No such file or directory

Besides this info from the manual: Note: In case your User model is not called ‘User’ or if you user name column is not called ‘username’ or if your user id column is not called ‘id’ you need to override the respective setting in the module configuration.

You'll also have to import your User class, e.g. if it's in a module.

Hi, if it a bugs?

i have to change the code at RAuthorizer.php line 292

from:

$criteria->addInCondition(Rights::module()->userIdColumn, $userIdList);

to:

$criteria->addInCondition(Rights::module()->userNameColumn, $userIdList);

so that it search the name column instead of id column for super user, else will get error: "There must be at least one superuser!"

I've put the module in yii blog demo

but when I inter http://localhost/yii1.1/demos/blog/index.php?r=rights/authItem/generate

Yii Blog Demo Home About Contact Logout (demo) Home » Rights » Generate items AssignmentsPermissionsRolesTasksOperations .........

the url changed!!!!

Home=>http://localhost/yii1.1/demos/blog/index.php?r=rights/post/index About=>http://localhost/yii1.1/demos/blog/index.php?r=rights/post/about ......

I don't know why .may be it's the bug of blog.Can somebody test and help me out?

It seems there isn't support table_prefix.So if I have many projects to use only one database.rights mey be confused.table_prefix needed!

I am getting the following error after installing yii-right...under...protected/modules/rights...

Alias "rights.RightsModule" is invalid. Make sure it points to an existing PHP file

Hey, nice job, Chris.

In assignments screen (/rights/assignment/view), the table header shows "Name" for the user name. It could be made more clear by using the text "User Name".