Is there any core functionality in YII2 that would replicate the features of the rights extension that’s available for yii1?
Is there a better way to implement authorization without having to touch the controller files when one needs to update who can access what?
Currently no.
Samdark… FYI my best friend have write extension more than rights extension, it is yii2-admin, You can search in github…
but my question, why Yii is not create User Interface for RBAC… RBAC have International standard and for newbie this topic about RBAC is very hard topic to understand…
One day we’ll probably do it but it’s not our current priority. Lots of other things to fix and do.