Access rules to prevent users to edit each other's posts

Yii 1.1 General Discussion
1

Hi,

I want to give my users the option to modify their own posts. What is the best way to prevent other users to modify other’s posts?

So that A can modify a post written by A,

B can modify post written by B

but A CAN’T modify a post written by B

Is it something we must set in the AccessRules?

Thank you!

2

The answer lies within this page ->

Roles

In short:


$bizRule = 'return Yii::app()->user->id==$params["post"]->authID;';

$task=$auth->createTask('updateOwnPost','update a post by author himself',$bizRule);

$task->addChild('updatePost');

HTH ;)

3

Great thanks!