dev

Author: skeeks-semenov

_ide/YiiApplication.php

@@ -8,9 +8,10 @@
 
 namespace yii\web;
 
+use skeeks\cms\rbac\CmsManager;
 /**
- * Class Application
- * @package yii\web
+ * @property CmsManager $authManager
+ * @author Semenov Alexander <semenov@skeeks.com>
  */
 class Application
 {

src/CmsManager.php

@@ -9,6 +9,7 @@
 namespace skeeks\cms\rbac;
 
 use yii\base\InvalidConfigException;
+use yii\helpers\ArrayHelper;
 
 /**
  * Class CmsManager
@@ -32,6 +33,10 @@ public function init()
         parent::init();
     }
 
+    /**
+     * Доступ суперадминистратора
+     */
+    const PERMISSION_ROOT_ACCESS = 'cms.root';
     /**
      * Доступ к админке
      */
@@ -83,4 +88,29 @@ static public function protectedPermissions()
         ];
     }
 
+    /**
+     * @return array|\yii\rbac\Item[]|\yii\rbac\Role[]
+     */
+    public function getAvailableRoles()
+    {
+        if (!\Yii::$app->user->identity || !\Yii::$app->user->identity) {
+            return $this->getRoles();
+        }
+
+        $roles = $this->getRoles();
+
+        if (!$roles) {
+            return [];
+        }
+
+        $result = [];
+        if (\Yii::$app->user->can(self::PERMISSION_ROOT_ACCESS)) {
+            return $roles;
+        }
+
+        ArrayHelper::remove($roles, self::ROLE_ROOT);
+
+        return $roles;
+    }
+
 }

src/controllers/AdminPermissionController.php

@@ -44,6 +44,10 @@ public function init()
         $this->modelShowAttribute = "name";
         $this->modelPkAttribute = "name";
         $this->modelClassName = Permission::className();
+
+        $this->generateAccessActions = false;
+        $this->permissionName = CmsManager::PERMISSION_ROOT_ACCESS;
+
         parent::init();
     }
 

src/controllers/AdminRoleController.php

@@ -40,6 +40,10 @@ public function init()
         $this->modelShowAttribute = "name";
         $this->modelPkAttribute = "name";
         $this->modelClassName = Role::className();
+
+        $this->generateAccessActions = false;
+        $this->permissionName = CmsManager::PERMISSION_ROOT_ACCESS;
+
         parent::init();
     }