myzero1 / yii-permission
An authorization library that supports access control models like RBAC in Yii.it is based on casbin.
Requires
- casbin/casbin: ~3.1
- yiisoft/yii2: ~2.0.14
Requires (Dev)
- php-coveralls/php-coveralls: ^2.1
- phpunit/phpunit: ~7.0
- yiisoft/yii2-app-basic: ~2.0.14
This package is not auto-updated.
Last update: 2024-10-25 13:15:43 UTC
README
Use Casbin in Yii 2.0 PHP Framework.
Installation
Getting Composer package
Require this package in the composer.json
of your Yii 2.0 project. This will download the package.
composer require casbin/yii-permission
Configuring application
To use this extension, you have to configure the Casbin
class in your application configuration:
return [
//....
'components' => [
'permission' => [
'class' => \yii\permission\Permission::class,
/*
* Casbin model setting.
*/
'model' => [
// Available Settings: "file", "text"
'config_type' => 'file',
'config_file_path' => '/path/to/casbin-model.conf',
'config_text' => '',
],
// Casbin adapter .
'adapter' => \yii\permission\Adapter::class,
/*
* Casbin database setting.
*/
'database' => [
// Database connection for following tables.
'connection' => '',
// CasbinRule tables and model.
'casbin_rules_table' => '{{%casbin_rule}}',
],
],
]
];
Usage
Quick start
Once installed you can do stuff like this:
$permission = \Yii::$app->permission;
// adds permissions to a user
$permission->addPermissionForUser('eve', 'articles', 'read');
// adds a role for a user.
$permission->addRoleForUser('eve', 'writer');
// adds permissions to a rule
$permission->addPolicy('writer', 'articles','edit');
You can check if a user has a permission like this:
// to check if a user has permission
if ($permission->enforce("eve", "articles", "edit")) {
// permit eve to edit articles
} else {
// deny the request, show an error
}
Using Enforcer Api
It provides a very rich api to facilitate various operations on the Policy:
Gets all roles:
$permission->getAllRoles(); // ['writer', 'reader']
Gets all the authorization rules in the policy.:
$permission->getPolicy();
Gets the roles that a user has.
$permission->getRolesForUser('eve'); // ['writer']
Gets the users that has a role.
$permission->getUsersForRole('writer'); // ['eve']
Determines whether a user has a role.
$permission->hasRoleForUser('eve', 'writer'); // true or false
Adds a role for a user.
$permission->addRoleForUser('eve', 'writer');
Adds a permission for a user or role.
// to user
$permission->addPermissionForUser('eve', 'articles', 'read');
// to role
$permission->addPermissionForUser('writer', 'articles','edit');
Deletes a role for a user.
$permission->deleteRoleForUser('eve', 'writer');
Deletes all roles for a user.
$permission->deleteRolesForUser('eve');
Deletes a role.
$permission->deleteRole('writer');
Deletes a permission.
$permission->deletePermission('articles', 'read'); // returns false if the permission does not exist (aka not affected).
Deletes a permission for a user or role.
$permission->deletePermissionForUser('eve', 'articles', 'read');
Deletes permissions for a user or role.
// to user
$permission->deletePermissionsForUser('eve');
// to role
$permission->deletePermissionsForUser('writer');
Gets permissions for a user or role.
$permission->getPermissionsForUser('eve'); // return array
Determines whether a user has a permission.
$permission->hasPermissionForUser('eve', 'articles', 'read'); // true or false
See Casbin API for more APIs.
Define your own model.conf
Learning Casbin
You can find the full documentation of Casbin on the website.
myzero1/yii-permission
An authorization library that supports access control models like RBAC in Yii.it is based on casbin. on the website.
rbac
sadf