Hi, I found problems to adding security to this module.
For example, in the VIEW action, actually you can update the roles and assignments, which is not good.
I had to move the part where these things were being update to the actionUpdate, and change the 'action' url of the forms that update them.
After this, I've been able to do access control check with accessRules() method, so only people with 'permissions.update' role were able to change them (Add child, remove parent, edit name).
34k+
fad
User Contributed Notes 3
Great
Just what I needed, It seems to work good, I am testing now. Thanks
Little bug
Hi, I found problems to adding security to this module.
For example, in the VIEW action, actually you can update the roles and assignments, which is not good.
I had to move the part where these things were being update to the actionUpdate, and change the 'action' url of the forms that update them.
After this, I've been able to do access control check with accessRules() method, so only people with 'permissions.update' role were able to change them (Add child, remove parent, edit name).
Please add Yii version to the title
Is this for Yii 1.1. or for Yii 2. ?
Leave a comment
If you have any questions, please ask in the forum instead.
Join the conversation to share a note.