This package provides an interface for checking if certain user has certain permission. Optional parameters could be passed
for fine-grained access checks. Additionally, DenyAll and AllowAll implementations are available out of the box.
- PHP 8.0 - 8.5.
The package could be installed with Composer:
composer require yiisoft/accessAn access checker such as RBAC implements the interface. A user identity may use it then for checking access:
useYiisoft\Access\AccessCheckerInterface;
class UserService
{
privateAccessCheckerInterface$accessChecker;
publicfunction__construct(AccessCheckerInterface$accessChecker)
{
$this->accessChecker = $accessChecker;
}
publicfunctioncan(string$permissionName, array$parameters = []): bool
{
return$this->accessChecker->userHasPermission(
$this
->getCurrentUser()
->getId(),
$permissionName,
$parameters
);
}
publicfunctiongetCurrentUser(): User
{
// ...
}
}In the handler it may look like the following:
publicfunctionactionList(UserService$userService)
{
if (!$userService->can('list_posts')) {
// access denied
}
// list posts
}If you need help or have a question, the Yii Forum is a good place for that. You may also check out other Yii Community Resources.
The Yii Access is free software. It is released under the terms of the BSD License.
Please see LICENSE for more information.
Maintained by Yii Software.
