Yii 프레임워크 미들웨어: 인증 및 권한 관리를 사용하여 역할 권한 제어 구현

'components' => [
    ...
    'user' => [
        'identityClass' => 'appmodelsUser',
        'enableAutoLogin' => true,
    ],
    'authManager' => [
        'class' => 'yiibacDbManager',
    ],
    ...
],

namespace appmiddleware;

use Yii;
use yiiaseAction;
use yiiaseActionFilter;
use yiiwebForbiddenHttpException;

class RBACMiddleware extends ActionFilter
{
    public function beforeAction($action)
    {
        $user = Yii::$app->user;

        // 如果用户未登录，则跳转到登录页面
        if ($user->isGuest) {
            $user->loginRequired();
        }

        // 获取当前用户的权限
        $permission = $action->controller->id . '/' . $action->id;

        // 检查用户是否有访问权限
        if (!$user->can($permission)) {
            throw new ForbiddenHttpException('您没有权限访问该页面。');
        }

        return parent::beforeAction($action);
    }
}

namespace appcontrollers;

use yiiwebController;

use appmiddlewareRBACMiddleware;

class UserController extends Controller
{
    public function behaviors()
    {
        return [
            RBACMiddleware::class,
        ];
    }

    ...
}

$auth = Yii::$app->authManager;

// 创建一个角色
$role = $auth->createRole('admin');
$role->description = '管理员';
$auth->add($role);

// 创建一个权限
$permission = $auth->createPermission('user/delete');
$permission->description = '删除用户';
$auth->add($permission);

// 给角色赋予权限
$auth->addChild($role, $permission);

// 给用户授权
$auth->assign($role, $userId);