How to restrict access to REST?

Question

Yii

How to restrict access to a PUT request to a resource in a rest application, if I want only its author to change the record. Where can I write my own rules for access?

Answer 1

Save the author's id. check the requested entry in BeforAction and look at the author's Id.
Most likely, your authors are tied to User, you can pull out the current usera id like this
.
So I do, but MB will tell you, an even better option.