user id in view

licass · February 1, 2012, 4:42pm

Hello, this is my 2º post .

How can i deny acess to user to see other information users.

Ex : User can only see user/’.Yii::app()->user->id.’ not user/some other user id

thanks

mbi · February 1, 2012, 5:53pm




$model = User::model()->findByPk(Yii::app()->user->id);

licass · February 1, 2012, 6:52pm

thanks , but the admin user can do it. i’ve try

array(‘deny’,

            'actions' =&gt; array('update', 'index', 'view'),


            'expression' =&gt; '&#036;_GET[&#092;'id&#092;'] &#33;== Yii::app()-&gt;user-&gt;id',


            'message' =&gt; &quot;Não Autorizado&#33;&quot;,


        ),

array(‘allow’, // allow admin user to perform ‘admin’ and ‘delete’ actions

            'actions' =&gt; array('admin', 'delete', 'index', 'create', 'view', 'update'),


            'users' =&gt; array('admin'),


        ),

and it works so far.

Can we do this way. Theres drawbacks?

Just my yii first try

No Not working