Posted 04 March 2013 - 12:22 AM
Help
public function accessRules()
{
return array(
array('allow', // allow all users to access 'index' and 'view' actions.
'actions'=>array('index','view'),
'users'=>array('*'),
),
array('allow', // allow authenticated users to access all actions
'users'=>array('@'),
),
array('deny', // deny all users
'users'=>array('*'),
),
);
}
Posted 04 March 2013 - 03:58 AM
Posted 04 March 2013 - 05:25 AM
Posted 04 March 2013 - 05:53 AM
Manee, on 04 March 2013 - 05:25 AM, said:
Posted 05 March 2013 - 05:24 PM
Manee, on 04 March 2013 - 05:25 AM, said:
Two things about this expression. First, you still need to use the users element,
and you’ll probably want to still restrict this to logged-in users (most likely).
Second, the expression itself should be some PHP code, quoted,
that when evaluated gives a Boolean result.
If the code in the expression will be true, then permission will be allowed; false, denied.
Say you wanted to restrict the publish action to only those with the role of editor:
array('allow',
'actions'=>array('publish'),
'users'=>array('@'),
'expression'=>'isset($user->role) && ($user->role==="editor")'
),
