I have found a column which name is "data" in authassignment and authitem table when I tried to implement RBAC.
I have few understood the bizrule that is I used for as: logged in user (who have only the lowest level access permission in my application) can read and update only their own profile. So I wrote the the bizrule as:
return Yii::app()->user->id == $params["user"]->id;
and it works for me.
Unfortunately, I do not understand about the field "data" that is where it should be used.
Thanks in advance