Wiki Follow @yiiframework

warning: While this security guide tries to be quite complete, is not exhaustive. If security matters for you, you ought to check several other references.

By default, the expression Yii::app()->user returns a CWebUser application component which represents the information that are closely related with the current user. Some information can be persistent throughout the current user session. For example, CWebUser already comes with a name property that stores the username of the current user.

p.s. latest version of this tutorial is always available unter the docs/ folder of the User Management Module.

In this cookbook I will attempt to explain how to use the lightweight version of Role-Based Access Control using a php file. This version does not use database but a php file and is controlled by CPhpAuthManager class.

If you want to add module based login to a site without using RBAC, please follow these guidelines.

If you need simple Role based access control without the long RBAC process then this article is just for you. Lets jump to the point.

I would like to provide you a quick tip on how to implement user level access to your Yii applications.

Todos los que hemos empezado a utilizar Yii para crear aplicaciones Web, nos hemos dado de bruces cuando hemos intentado poner a funcionar el RBAC (acceso de control basado en roles).

Yii does not have an LDAP class itself, but its very easy to implement LDAP in the stock UserIdentity class.

After adding proper form to the main layout, like: