Yii Accessrules Delete Option Only For Authenticated User.

Hi,

I have designed my view as, every logged user can post their own post. and when the user don’t want or delete the particular post, that has been posted by the same user. I want to restrict all other users to delete other users post… Only i want delete option in the particular post of particular users…

accessRules:

public function accessRules() {

	return array(

	array('allow', // allow all users to perform 'index' and 'view' actions

		'actions' => array( 'view'),

		'users' => array('*'), ),

	array('allow', // allow authenticated user to perform 'create' and 'update' actions

		'actions' => array('create','index', 'update'),

		'users' => array('@'), ),

	array('allow', // allow admin user to perform 'admin' and 'delete' actions

		'actions' => array('admin', 'delete'),

		'users' => array('admin'), ),

	array('deny', // deny all users

		'users' => array('*'), ), );

}

Action:

public function actionDeletePost($id) {

	$this -> loadModel($id) -> delete();

}

View:

[html]<img src="<?php echo Yii::app()->request->baseUrl;?>/images/site/delete-icon.png" alt=“Delete this post” onclick=“javascript: deletePost(this, <?php echo ($data->id) ? $data->id : ‘\‘null\’’ ?>);”>[/html]

Script:

[html]function deletePost(row,postId) {

if (confirm('Are you sure want to delete this post?')) {


    if (postId != 'null') {


        //call an ajax request to delete the row...


        $.ajax({


            'type' : 'post',


            'url'  : '?r=forumPost/deletePost&id='+ postId,


            'dataType' : 'data',


            'beforeSend' : function() {},


            'success' : function(data) {


                        jQuery("#list-of-post").load("<?php echo Yii::app()->createUrl('//forumPost/forumPostDisplay'); ?>");


                },


              'error': function(data){


              	alert("Error Occurred... Please try again later...!");


              }


        });


    }


    // Remove UI component


    // $(row).parent().parent().parent().remove();


}

}[/html]

Please help me to delete only the particular user post in the view page…

I hope you are storing author_id for every post.

When you delete the post, just if author_id is equal to current logged in user id.

public function actionDeletePost($id) {

        $this -> loadModel($id) -> delete();

}

public function actionDeletePost($id) {

       $model= $this -> loadModel($id) ;

       if($model->author_id==Yii::app()->user->id){

        // delete here

        $model->delete();

       }else{

     // throw exception or error message for ajax call.

}

}

thanks hemc… it’s working fine now…