search
HomeBackend DevelopmentPHP TutorialYII扩展srbac,用户管理(user/admin)无访问权限

各位好,

我现在正在使用YII Framework开发项目,使用srbac扩展做权限控制。

在搭建框架模型的过程中我遇到了这个问题:

在使用Gii生成User Model 和User Controller以及一系列页面之后,我配置了SuperUser的权限。
授权的操作包括:UserIndex,UserView,UserDelete,UserUpdate,UserCreate,UserAdmin

不知何故,唯有UserAdmin (http://mysite/index.php?r=user/admin) 提示未授权。

Error 403您未被授权执行这个动作


其他授权操作都没问题,另外我又下载srbac的blog例子,基于它的代码下添加用户管理的权限操作,仍然是UserAdmin不生效。

在跟踪SBaseController这个类的时候,我发现$controller这个变量在访问user/admin的时候其值为Site,其他用户管理页面$controller的值都是User。

求解~


回复讨论(解决方案)

各路大神来帮忙啊,一晚上一个回复都没有。

??框架太偏?了,用的人少,建?你?
Error 403
您未被授权执行这个动作
??入手,反向找??,??用var_dump()?出看看.

??框架太偏?了,用的人少,建?你?
Error 403
您未被授权执行这个动作
??入手,反向找??,??用var_dump()?出看看.



感谢你的回复,问题已解决。

问题原因在Controller.php中的function filters() :

return array('accessControl','postOnly + delete',);

Gii默认生成的代码只允许通过post方式提交delete请求。而framework把UserAdmin操作整个识别为delete,删除filters问题解决。


??框架太偏?了,用的人少,建?你?
Error 403
您未被授权执行这个动作
??入手,反向找??,??用var_dump()?出看看.



感谢你的回复,问题已解决。

问题原因在Controller.php中的function filters() :

return array('accessControl','postOnly + delete',);

Gii默认生成的代码只允许通过post方式提交delete请求。而framework把UserAdmin操作整个识别为delete,删除filters问题解决。 ???

其实主要是yii自带的验证规则accessRules里面限制的

array('allow',  'actions'=>array('index','view', 'admin'),
'users'=>array('*'),
),

加上‘admin'就可以了

谢谢,终于找到问题了,这个帖子太棒了

Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
What is the difference between unset() and session_destroy()?What is the difference between unset() and session_destroy()?May 04, 2025 am 12:19 AM

Thedifferencebetweenunset()andsession_destroy()isthatunset()clearsspecificsessionvariableswhilekeepingthesessionactive,whereassession_destroy()terminatestheentiresession.1)Useunset()toremovespecificsessionvariableswithoutaffectingthesession'soveralls

What is sticky sessions (session affinity) in the context of load balancing?What is sticky sessions (session affinity) in the context of load balancing?May 04, 2025 am 12:16 AM

Stickysessionsensureuserrequestsareroutedtothesameserverforsessiondataconsistency.1)SessionIdentificationassignsuserstoserversusingcookiesorURLmodifications.2)ConsistentRoutingdirectssubsequentrequeststothesameserver.3)LoadBalancingdistributesnewuser

What are the different session save handlers available in PHP?What are the different session save handlers available in PHP?May 04, 2025 am 12:14 AM

PHPoffersvarioussessionsavehandlers:1)Files:Default,simplebutmaybottleneckonhigh-trafficsites.2)Memcached:High-performance,idealforspeed-criticalapplications.3)Redis:SimilartoMemcached,withaddedpersistence.4)Databases:Offerscontrol,usefulforintegrati

What is a session in PHP, and why are they used?What is a session in PHP, and why are they used?May 04, 2025 am 12:12 AM

Session in PHP is a mechanism for saving user data on the server side to maintain state between multiple requests. Specifically, 1) the session is started by the session_start() function, and data is stored and read through the $_SESSION super global array; 2) the session data is stored in the server's temporary files by default, but can be optimized through database or memory storage; 3) the session can be used to realize user login status tracking and shopping cart management functions; 4) Pay attention to the secure transmission and performance optimization of the session to ensure the security and efficiency of the application.

Explain the lifecycle of a PHP session.Explain the lifecycle of a PHP session.May 04, 2025 am 12:04 AM

PHPsessionsstartwithsession_start(),whichgeneratesauniqueIDandcreatesaserverfile;theypersistacrossrequestsandcanbemanuallyendedwithsession_destroy().1)Sessionsbeginwhensession_start()iscalled,creatingauniqueIDandserverfile.2)Theycontinueasdataisloade

What is the difference between absolute and idle session timeouts?What is the difference between absolute and idle session timeouts?May 03, 2025 am 12:21 AM

Absolute session timeout starts at the time of session creation, while an idle session timeout starts at the time of user's no operation. Absolute session timeout is suitable for scenarios where strict control of the session life cycle is required, such as financial applications; idle session timeout is suitable for applications that want users to keep their session active for a long time, such as social media.

What steps would you take if sessions aren't working on your server?What steps would you take if sessions aren't working on your server?May 03, 2025 am 12:19 AM

The server session failure can be solved through the following steps: 1. Check the server configuration to ensure that the session is set correctly. 2. Verify client cookies, confirm that the browser supports it and send it correctly. 3. Check session storage services, such as Redis, to ensure that they are running normally. 4. Review the application code to ensure the correct session logic. Through these steps, conversation problems can be effectively diagnosed and repaired and user experience can be improved.

What is the significance of the session_start() function?What is the significance of the session_start() function?May 03, 2025 am 12:18 AM

session_start()iscrucialinPHPformanagingusersessions.1)Itinitiatesanewsessionifnoneexists,2)resumesanexistingsession,and3)setsasessioncookieforcontinuityacrossrequests,enablingapplicationslikeuserauthenticationandpersonalizedcontent.

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

VSCode Windows 64-bit Download

VSCode Windows 64-bit Download

A free and powerful IDE editor launched by Microsoft

Atom editor mac version download

Atom editor mac version download

The most popular open source editor

Dreamweaver Mac version

Dreamweaver Mac version

Visual web development tools

ZendStudio 13.5.1 Mac

ZendStudio 13.5.1 Mac

Powerful PHP integrated development environment

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)