I am codding multiuser application.And in each model I have a field user_id, every user login and i can get him id: Yii::app()->user->id.
I don't want to repeat it in every action find/update/inset condition so How can I set this in model user_id?
I am codding multiuser application.And in each model I have a field user_id, every user login and i can get him id: Yii::app()->user->id.
I don't want to repeat it in every action find/update/inset condition so How can I set this in model user_id?
You have to create parent class and inherit it
abstract class UserAccess extends CActiveRecord {
public function getUserAccessCondition($condition, array $params)
{
if ($condition instanceof CDbCriteria) {
$condition->compare('user_id', Yii::app()->user->id);
} else {
if(!is_array($condition)) {
$condition['condition'] = $condition;
$condition['params'] = $params;
}
if (trim($condition['condition']) == '') $condition['condition'] = 'user_id=:user_id';
else $condition['condition'] .= ' and user_id=:user_id';
$params[':user_id'] = Yii::app()->user->id;
}
return $condition;
}
public function find($condition='',$params=array())
{
$condition = $this->getUserAccessCondition($condition, $params);
parent::find($condition, $params);
}
// and so on in findAll, findAttributes...
// for findByPk you need make some things maybe after find
// chek user_id and if is not equal throw access denied exception
public function afterFind()
{
if ($this->user_id != Yii::app()->user->id) {
throw new CHttpException(403, 'Access Denied');
}
}
}
class UserItem extends UserAccess
{
//.. rules tableName etc
}
// simple call
$userItem = UserItem::model()->find('name=:name', array(':name' => 'Some search name'));