Why doesn't RBAC work in Yii2?

Question

Yii

Hey!
Actually a question. Create role, create permission, attach permission to role. I add a role to the user.
But for some reason the user with such access role does not receive.
How:

$auth = \Yii::$app->authManager;

            $admin = $auth->createRole('admin');
            $auth->add($admin);

            $showFilter = $auth->createPermission('showFilter');
            $showFilter->description = "Показать фильтр";
            $auth->add($showFilter);

            $auth->addChild($admin, $showFilter);

            $auth->assign($admin, 76);

But the call returns false for some reason. Help me understand why. Everything was done according to the documentation. How is it Authorization UPDATE: If you write then there is access, it does not work precisely through the "permission" attached to the role. Even if the role is attached to the role, then it does not get access through the child role (
Yii::$app->user->can('showFilter')
Yii::$app->user->can('admin')

Answer 1

You may have RBAC cache enabled, look for the string " 'authManager' => [ " in your project if it looks like this:

'authManager' => [
    'class' => 'yii\rbac\DbManager',
    'cache' => 'cache'
],

So the RBAC cache is enabled, remove 'cache' => 'cache' on the dev and it will be fine or invalidate the cache:
Yii::$app->authManager->invalidateCache();

Answer 2

Yii::$app->user->getId() == 76?

Answer 3

I understand that the topic is old, but for beginners like me, it is still relevant. In my case, the problem was that, along with the creation of roles and privileges, I immediately tried to screw in the rules, in which I messed up from the very beginning and forgot about them. As soon as I commented out the rules (ruls) - everything worked.
<?php
namespace console\controllers;
use Yii;
use yii\console\Controller;
use common\components\rbac\UserRoleRule;
class RbacController extends Controller
{
public function actionInit()
{
$auth = Yii::$app->authManager;
$auth->removeAll(); //delete old data
//Let's create, for example, permissions to access the admin panel
// add "enterInFrontend" permission
$enterInFrontend = $auth->createPermission('enterInFrontend');
$enterInFrontend->description = 'Entering frontend';
$auth->add($enterInFrontend);
// add "enterInBackend" permission
$enterInBackend = $auth->createPermission('enterInBackend');
$enterInBackend->description = 'Admin Login';
$auth->add($enterInBackend);
// add "adminControl" permission
$adminControl = $auth->createPermission('adminControl');
$adminControl->description = 'Moderator control';
$auth-> add($adminControl);
// Turn on our handler
// $rule = new UserRoleRule();
// $auth->add($rule);
//Add roles
$simpleUser = $auth->createRole('simpleUser');
$simpleUser->description = 'role: User';
$auth->add($simpleUser);
$moder = $auth->createRole('moder');
$moder->description = 'role: Moderator';
$auth->add($moder);
$admin = $auth->createRole('admin');
$admin->description = 'role: Administrator';
$auth->add($admin);
//Add children
$auth->addChild($simpleUser, $enterInFrontend);
$auth->addChild($moder, $enterInBackend);
$auth->addChild($admin, $adminControl);
$auth->addChild($moder, $simpleUser);
$auth->addChild($admin, $moder);
}
Mindfulness is our everything!
Now we will understand why rules are needed.