RBAC and navbar, how?

bambinou · April 21, 2015, 5:27pm

Hello,

Does anyone knows how to hide or show links in the navbar according to the user role please?

Thank you,

Ben

Raoul · April 21, 2015, 9:01pm

Hi,

there is no built-in feature to do that, you should build dymamically the navbar and only add those items depending on permission & roles of the curent user.

ciao

bambinou · April 21, 2015, 9:10pm

Hi Raoul thank you.

Ben

lukos · April 22, 2015, 4:25pm

The default main layout shows how to do this by building the nav items array and then adding it to the NavBar, that way you can use simple logic like if ( Yii::$app->user->can(‘permission_admin’) ) to add items to the array (or not).


NavBar::begin([

                'brandLabel' => 'My Company',

                'brandUrl' => Yii::$app->homeUrl,

                'options' => [

                    'class' => 'navbar-inverse navbar-fixed-top',

                ],

            ]);

            

            $items = [

                    ['label' => 'Home', 'url' => ['/site/index']],

                    ['label' => 'About', 'url' => ['/site/about']],

                    ['label' => 'Contact', 'url' => ['/site/contact']],

                    ['label' => 'Books', 'url' => ['/book/index']],

                     ['label' => 'Authors', 'url' => ['/author/index']],

                    Yii::$app->user->isGuest ?

                        ['label' => 'Login', 'url' => ['/site/login']] :

                        ['label' => 'Logout (' . Yii::$app->user->identity->username . ')',

                            'url' => ['/site/logout'],

                            'linkOptions' => ['data-method' => 'post']],

                ];

            if ( Yii::$app->user->can('permission_admin') )

                $items[] = ['label' => 'Permissions', 'url' => ['/admin/assignment']];

            

            echo Nav::widget([

                'options' => ['class' => 'navbar-nav navbar-right'],

                'items' => $items,

            ]);

            NavBar::end();

bambinou · April 22, 2015, 7:25pm

aThank you for the reply,

this seems to be a neat way to do it thank you for sharing, just a question please, when you type this:




   if ( Yii::$app->user->can('permission_admin') )

                $items[] = ['label' => 'Permissions', 'url' => ['/admin/assignment']];

if my role is "admin" do I still need to type "permission_admin" ? or just "admin"?

Also when I add your code as below I get an error:

[php]

        NavBar::begin([


            'brandLabel' =&gt; 'Kollox Forum',


            'brandUrl' =&gt; Yii::&#036;app-&gt;homeUrl,


            'options' =&gt; [


                'class' =&gt; 'navbar navbar-fixed-top',


            ],


        ]);


        &#036;menuItems = [


            ['label' =&gt; 'Home', 'url' =&gt; ['/site/index']],


            ['label' =&gt; 'About', 'url' =&gt; ['/site/about']],


            ['label' =&gt; 'Contact', 'url' =&gt; ['/site/contact']],


        ];


        if (Yii::&#036;app-&gt;user-&gt;isGuest) {


            &#036;menuItems[] = ['label' =&gt; 'Signup', 'url' =&gt; ['/site/signup']];


            &#036;menuItems[] = ['label' =&gt; 'Login', 'url' =&gt; ['/site/login']];


        } else {


            &#036;menuItems[] = [


                'label' =&gt; 'Logout (' . Yii::&#036;app-&gt;user-&gt;identity-&gt;username . ')',


                'url' =&gt; ['/site/logout'],


                'linkOptions' =&gt; ['data-method' =&gt; 'post']


            ];


        }


         if ( Yii::&#036;app-&gt;user-&gt;can('admin') )


         &#036;menuItems[] = ['label' =&gt; 'Permissions', 'url' =&gt; ['/book']]; 


        echo Nav::widget([


            'options' =&gt; ['class' =&gt; 'navbar-nav navbar-right'],


            'items' =&gt; &#036;menuItems,


        ]);


        NavBar::end();

#####################ERROR#######################

PHP Fatal Error – yii\base\ErrorException

Call to a member function checkAccess() on null

in C:\xampp\htdocs\forum\vendor\yiisoft\yii2\web\User.php at line 662

653654655656657658659660661662663664665666667668669 * caching is effective only within the same request and only works when $params = [].

 * @return boolean whether the user can perform the operation as specified by the given permission.


 */


public function can(&#036;permissionName, &#036;params = [], &#036;allowCaching = true)


{


    &#036;auth = Yii::&#036;app-&gt;getAuthManager();


    if (&#036;allowCaching &amp;&amp; empty(&#036;params) &amp;&amp; isset(&#036;this-&gt;_access[&#036;permissionName])) {


        return &#036;this-&gt;_access[&#036;permissionName];


    }


    &#036;access = &#036;auth-&gt;checkAccess(&#036;this-&gt;getId(), &#036;permissionName, &#036;params);


    if (&#036;allowCaching &amp;&amp; empty(&#036;params)) {


        &#036;this-&gt;_access[&#036;permissionName] = &#036;access;


    }





    return &#036;access;


}

}

yii\base\ErrorHandler::handleFatalError()

[/PHP]

Thank you,

Ben

lukos · April 23, 2015, 3:55pm

You need to configure your auth correctly in the config to be, for instance, DbAuthManager, that will get rid of the error of auth being null.

The name is just the name of the role or permission. Mine is called "permission_admin", so you can just use "admin" if you want.