在YII2中的RBAC：user-> can（）在PHPManager中

Question

我想在我的项目中使用Yii2高级应用程序版本在phpmanager中配置rbac。但是\ Yii :: $ app-> user-> can没有返回预期的结果。

我写的RbacController和成功地执行yii rbac/init

即更新公共/组件/ items.php如图

<?php 
return [ 
    'user' => [ 'type' => 1, 'children' => [ 'createX', ], ], 
    'createX' => [ 'type' => 2, 'description' => 'create a X',], 
    'admin' => [ 'type' => 1, 'children' => [ 'updateX', ], ], 
    'updateX => [ 'type' => 2, 'description' => 'update a X', ], 
]; 

在SignupForm ::注册，我添加它：

$auth = Yii::$app->authManager; 
$roleObj = $auth->getRole('user'); // this role is defined by the RBAC Controller's init action 
$auth->assign($roleObj, $user->getId()); 

assignments.php

return [ 2 => [ 'user', ], ]; 

我认为2对应于用户ID。

rules.php

return []; 

公共/ main.php

... 
'components' => [ 
     ... 
     'authManager' => [ 
      'class' => 'yii\rbac\PhpManager', 
      'defaultRoles' => ['user','admin'], 
      'itemFile' => '@common/components/rbac/items.php', 
      'assignmentFile' => '@common/components/rbac/assignments.php', 
      'ruleFile' => '@common/components/rbac/rules.php' 
     ], 
    ], 
... 

当我该角色的权限，它打印：

阵列（[createX] => YII \ RBAC \ Permission Object（[type] => 2 [name] => createX [description] =>创建一个X [ruleName] => [data] => [createdAt] => 1438601819 [updatedAt] => 1438601819））

所以我期待的是用户没有更新权限，但在方法XController ::更新

echo \Yii::$app->user->can('updateX'); 
// returns 1, just the same than \Yii::$app->user->can('createX') returning 

请一些帮助

Answer 1

第一项文件应该是：

<?php 
return [ 
     'user' => [ 'type' => 1, 'children' => [ 'createX', ], ], 
     'createX' => [ 'type' => 2, 'description' => [ 'create a X', ], ], 
     'admin' => [ 'type' => 1, 'children' => [ 'updateX', ], ], 
     'updateX' => [ 'type' => 2, 'description' => ['update a X', ], ], 
]; 

您可以使用var_dump验证代码是否正确：

var_dump(\Yii::$app->authManager);