1
votes

I am codding multiuser application.And in each model I have a field user_id, every user login and i can get him id: Yii::app()->user->id.

I don't want to repeat it in every action find/update/inset condition so How can I set this in model user_id?

2
Isnt this stuff solvable with Yii's RBAC system? - sensorario
I dont think, in RBAC system checking access, but not setting default datat for models. - Actimele

2 Answers

1
votes

Use a CActiveRecordBehavior. That way you can hook the beforeFind/afterFind and beforeSave/afterSave events for all of your models. It's really quite nice

0
votes

You have to create parent class and inherit it

abstract class UserAccess extends CActiveRecord {

    public function getUserAccessCondition($condition, array $params)
    {
        if ($condition instanceof CDbCriteria) {
            $condition->compare('user_id', Yii::app()->user->id);
        } else {
            if(!is_array($condition)) {
                $condition['condition'] = $condition;
                $condition['params'] = $params;
            }
            if (trim($condition['condition']) == '') $condition['condition'] = 'user_id=:user_id';
            else $condition['condition'] .= ' and user_id=:user_id';
            $params[':user_id'] = Yii::app()->user->id;
        }
        return $condition;
    }

    public function find($condition='',$params=array())
    {
        $condition = $this->getUserAccessCondition($condition, $params);
        parent::find($condition, $params);
    }
    // and so on in findAll,  findAttributes...
    // for findByPk you need make some things maybe after find 
    // chek user_id and if is not equal throw access denied exception 
    public function afterFind()
    {
        if ($this->user_id != Yii::app()->user->id) {
            throw new CHttpException(403, 'Access Denied');
        }
    }
}


class UserItem extends UserAccess
{
   //.. rules tableName etc

}
// simple call
$userItem = UserItem::model()->find('name=:name', array(':name' => 'Some search name'));