Custom denyCallback setup even when returning false from matchCallback using Yii2 behavior

Question

I use Yii2and use behaviors in my controllers.

I create my own permission system because the permissions are quite complex. I need to use matchCallback .

Here is an example:

public function behaviors() {
    return [
        'access' => [
            'class' => AccessControl::className(),
            'only' => ['view'],
            'rules' => [
                [
                    'allow' => true,
                    'actions' => ['view'],
                    'matchCallback' => function ($rule, $action) {
                        return Yii::$app->authManager->can($rule, $action);
                    }
                ],      
                // everything else is denied
            ],
        ],
    ];
}   

Now, unfortunately, the way it works matchCallbackis to return trueor falseon if it should continue to execute the rule and not be able to return true or false of which is allowed or not.

So, if I return falsethat he should not continue (and therefore forbid them), then I can’t configure denyCallbackas he completes the rule.

denyCallback, false matchCallback - -?

Answer 1

denyCallback AccessControl AccessRule. , allow null. , denyCallback AccessRule:

public function behaviors() {
    return [
        'access' => [
            'class' => AccessControl::className(),
            'only' => ['view'],
            'rules' => [
                [
                    'allow' => true,
                    'actions' => ['view'],
                    'matchCallback' => function ($rule, $action) {
                        return Yii::$app->authManager->can($rule, $action);
                    }
                ],
            'denyCallback' => function ($rule, $action){...}
            // everything else is denied
            ],
        ],
    ];
}  

AccessRule allows(), false null, , denyCallback , :

class MyAccessRule extends AccessRule
{
    public function allows($action, $user, $request)
    {
        $allows = parent::allows($action, $user, $request);
        if ($allows === null) {
            return false;
        } else {
            return $allows;
        }

    }
}

matchCallback , , matchCallback true, (, , ..), allows() allow true false, . matchCallback false - allow null, denyCallback , AccessControl denyCallback, .

, , allows() .

class MyAccessRule extends AccessRule
{
    public $allowCallback;
    public function allows($action, $user, $request)
    {
        if(!empty($this->allowCallback) {
            return call_user_func($this->allowCallback);
        }
        $allows = parent::allows($action, $user, $request);
        if ($allows === null) {
            return false;
        } else {
            return $allows;
        }

    }
}

Answer 2

... Yii::$app->authManager->checkAccess($uerId,$permissionName,$dataToPassInArray) . , , Yii::$app->user->identity. , (, yii\web\User ).