I'm trying to use filters and access rules, but it seems to go wrong. Simply, it don't

Did you read the documentation about <a href="http://www.yiiframework.com/doc/ap

Filters and Access Rules about yiiboilerplate HOT 1 CLOSED

infoitservit commented on June 21, 2024

Filters and Access Rules

from yiiboilerplate.

Comments (1)

hijarian commented on June 21, 2024

Did you read the documentation about CAccessControlFilter, CController.filters, CController.accessRules and Definitive Guide page about access control filter?
What entry point you're using, backend or frontend? Because on backend you already have access rules defined on base BackendController class.
What is the exact error/misbehavior you're getting?

I just have created simplest possible access control definition on frontend, inside the FrontendSiteController, using the following methods:

 public function actionFirst()
    {
        echo '1';
    }

    public function actionSecond()
    {
        echo '2';
    }

    public function actionLogin()
    {
        Yii::app()->user->login(new DemoIdentity('demo', 'demo'));
    }

    public function actionLogout()
    {
        Yii::app()->user->logout();
    }

    public function filters()
    {
        return array(
            'accessControl'
        );
    }

    public function accessRules()
    {
        return array(
            array(
                'allow',
                'actions' => array('first', 'login')
            ),
            array(
                'allow',
                'actions' => array('second', 'logout'),
                'users' => array('@'),
            ),
            array('deny'),
        );
    }

class DemoIdentity extends CUserIdentity
{
    public function authenticate()
    {
        return true;
    }
}

And get the expected behavior: "second" and "logout" actions accessible only when you're logged in.

I did the same trick on backend:

class AccessController extends BackendController
{

    public function actionFirst()
    {
        echo '1';
    }

    public function actionSecond()
    {
        echo '2';
    }

    public function actionLogin()
    {
        Yii::app()->user->login(new DemoIdentity('demo', 'demo'));
    }

    public function actionLogout()
    {
        Yii::app()->user->logout();
    }

    public function filters()
    {
        return array(
            'accessControl'
        );
    }

    public function accessRules()
    {
        return array(
            array(
                'allow',
                'actions' => array('first', 'login')
            ),
            array(
                'allow',
                'actions' => array('second', 'logout'),
                'users' => array('@'),
            ),
            array('deny'),
        );
    }
}

class DemoIdentity extends CUserIdentity
{
    public function authenticate()
    {
        return true;
    }
}