Question About Advantage Of Rbac

Yii 1.1 General Discussion
1

I have a question about RBAC !

What situations I must ( or should) use RBAC to replace accessRule . In internet, I see more example about RBAC but I think it can be resolve by accessRule !?

In book "Web Application Development With Yii And PHP", there is a situation using RBAC. 3 Role : owner, member, reader in Project context. But with table tbl_project_user_assignmen, I can define role of user of a Project, then I can code in action_ to restrict Access of user !?

In summary , I don’t understand advantage of RBAC, Which situations I should ( or shouldn’t) use RBAC

My English is not well,I hope you can understand my question !!!

Thanks for every answer !!!

2

RBAC is more complex but also more powerful. It’s easier to manage when you got lots of controllers and different types of user profiles.

Access lists are simpler and you should start with them. When you reach their limit and it will start to be cumbersome to manage them then you could move to using RBAC.

3

See this link

http://www.yiiframework.com/wiki/328/simple-rbac/