Rbac - how to configure access based on created roles?

Question

Yii

In the base of the 3-user (admin (id_1) , content(id_3) and user(id_2 ) which are in 'user', in 'auth_assignment' and in 'auth_item_child' they have the following roles defined: there is 'auth_rule-isAuthor'. It seems that everything logically works - 'user' browsing the blog, admin.site.com/blog/blog/view?id=18 created by the user 'content' does not see the 'update', 'delete' buttons like the others, because he has no rights

But if he just goes to the link admin.site.com/blog, he
can easily delete or edit any post.How to set up these roles here?

Answer 1

it can easily delete or edit any post

1. You need to configure the AccessControl to define access rights to the controller actions
2. Customize the display of buttons in the ActionColumn using the visibleButtons property