Yii 2 JustCoded RBAC extension

Extended RBAC Manager with route-based access.

Features

Pre-defined Roles and Permissions

By default this extension init such roles and permissions:

Permissions:

• * - master permission. parent of all other permissions
• administer - permission you may use to check access to admin panel

Roles:

• Guest - not authenticated user
• Authenticated - authenticated user (you will need to add it by yourself you users)
• Administrator - has administer permission, so has access to admin panel
• Master - has * permission, super user with access to everything

Routes Scanner

Special console command (or GUI interface) has feature to scan your project files and import permissions like:

• {controller->uniqueId}/*
• {controller->uniqueId}/{action->id}

You can create additional roles (or add permissions to existed roles) to configure your system high-level access.

Routes Access filter

Most popular thing in RBAC configuration is to close access to some parts of the site (logged in area, different user roles, admin area, etc.).

Extension provides filter very similar to standard AccessControl which check {controller->uniqueId}/*, {controller->uniqueId}/{action->id} permission on page load and throw 403 error if you're not allowed to access routes.

GUI

Simple GUI* interface to manage your roles and permissions.

Note: GUI still has alpha version features. Don't share access to this GUI to your clients!

Installation

The preferred way to install this extension is through composer.

Either run

or add

to the require section of your composer.json.

Configuration

Component Setup

To use the RBAC extension, you need to configure the components array in your application configuration:

Bootstrap4 Themes Support

By default all views use standard yii2-bootstrap package with Boostrap v3. If you use modern Bootstrap 4, then you can overwrite some classes to use yii2-bootstrap4 package instead. Inside your configuration you need to reconfigure container dependencies like this:

• Note: you need to add yiisoft/yii2-bootstrap4 package dependency manually in your composer.json.

Basic RBAC configuration

Please follow oficial documentation to configure RBAC storage (create necessary files or database tables).

If you use DbManager you can init database tables with the following migration command:

Init base roles

Before usage this extension you will need to init default roles, which are pre-defined for it.

To do that you will need to run several commands:

Usage

GUI interface

To use graphical interface just follow the route you specified as base when scan routes / configure module.

Note: Role Permissions selector is a hotfix solution, so it doesn't display proper tree structure when you move items between boxes. This will be fixed in next versions.

Route Access filter

RouteAccessControl filter can be used inside specific controller (or globally) to control access to controller actions on very high level.

Routes scanner insert permissions like:

{controller->uniqueId}/* {controller->uniqueId}/{action->id}

On controller beforeAction this filter check that current logged in user has permissions to access these routes.

To enable filter inside some specific controller:

Or you can configure this filter globally. Inside you current application config just add such section:

Example

You can check the example on our Yii2 starter kit.