How to pass the used model in matchCallback?

Question

Yii

There is a need to allow editing the post only by a user with the manager role, and also by the post authors, the id of the post author is stored in the autor_id cell, I
try to organize it like this in the controller:

public function behaviors()
    {
    'access' => [
        'class' => AccessControl::className(),
        'ruleConfig' => [
            'class' => AccessRule::className(),
        ],
        'rules' => [
            [
                'actions' => ['update'],
                'allow' => true,
                'roles' => ['manager'],
                'matchCallback' => function ($rule, $action,$model) {
                    return Yii::$app->user->identity->id==$model->autor_id;}
            ],
        ]
    ]    
}

I do not get access, as you understand, and I understand what I am doing, something is not right. Do not tell me how to do it right?

Answer 1

I think you can already use RBAC
And one more thing. Your problem is solved there

[
    'allow' => true,
    'actions' => ['update'],
    'roles' => ['updatePost'],
    'roleParams' => function() {
        return ['post' => Post::findOne(Yii::$app->request->get('id'))];
    },
],

or so

[
    'allow' => true,
    'actions' => ['update'],
    'roles' => ['updatePost'],
    'roleParams' => ['postId' => Yii::$app->request->get('id')];
],

If we abstract from RBAC, then following this logic, you must independently find the model in the database in matchCallback and perform all the necessary checks there.

Answer 2

You can make the getModel() method in the controller, which will cache the result (put it in a property). then in the closure you can do $this->getModel()->autor_id.
The problem is that the filters run up to the main action.

Answer 3

but thanks for this solution Post::findOne(Yii::$app->request->get('id')) in principle, that's why I'm assigning the answer.