Difference between #3 and #4 of
Configuring controller access rules to default-deny

Revision #4 has been created by nsanden on Jan 18, 2014, 2:20:35 AM with the memo:

fixed default allow rule
« previous (#3)

Changes

Title unchanged

Configuring controller access rules to default-deny

Category unchanged

How-tos

Yii version unchanged

Tags unchanged

accessRules, security, access control

Content changed

[...]
```php
public function rules() {
return array(
// other rules here
array('denyallow') // default allow
);
}
```
Even those not implementing this article's technique would do well to add the default-allow rule even though it would be handled by Yii automatically so that others reading the code would **know** this was intended behavior.
[...]
11 0
12 followers
Viewed: 105 354 times
Version: 1.1
Category: How-tos
Tags: access control, accessRules, security
Written by: Steve Friedl
Last updated by: nsanden
Created on: Apr 4, 2011
Last updated: 10 years ago
Update Article
Revert to #3 | Revert to #4

Revisions

View all history