Sending $params to $user->can() in AccessRule

[alagodich]

Hi

Should not we have a way to send params to access rules when configuring them as a controller's behaviour?

For example in your guide you are creating updateOwnPost rule which is expecting postId param. But we don't have a way to send this param when configuring rules this way:

    public function behaviors()
    {
        return [
            'access' => [
                'class' => AccessControl::className(),
                'rules' => [
                    [
                        'actions' => ['update'],
                        'allow' => true,
                        'roles' => ['admin', 'updatePost', 'updateOwnPost'],
                    ],

In AccessRule class we just call can() method without any params.
So updatePost will not resolve with updateOwnPost as we cannot send postId.

Is it a bad practice and i have to use the following right in the action?

if (\Yii::$app->user->can('updatePost', ['post' => $post])) {
    // update post
}

I would prefer to keep all access assigning in one place.

[cebe]

I am currently doing it like that in one of my projects:

    public function behaviors()
    {
        return [
            'access' => [
                'class' => AccessControl::className(),
                'rules' => [
                [
                    'actions' => ['create', 'quick-create'],
                    'allow' => true,
                    'matchCallback' => function($rule, $action) {
                        return Yii::$app->user->can('task:create', ['project' => $action->controller->findProject()]);
                    },
                ],
...

[alagodich]

Right, i can use that, thank you.