Yii2. RBAC. How can a user with a role deny a certain permission?

Question

Yii

There is a user role, it includes the author role.
The author role has permissions: createPost, updatePost, deletePost.
There is a user - user1. He is assigned the user role. It turns out that he has createPost, updatePost, deletePost permissions.
How for this particular user to deny one of the permissions, for example, deletePost?

Answer 1

You just need to write a rule that will determine whether an action is allowed for a particular user or not, and connect it to permission

Answer 2

sha-man at you the user can have some roles? The chain of roles is not inherited one after another, each role is independent and a user can have several roles. For example, CreaterPost, UpdaterPost - judging by the task you need to separate, then you will get a more flexible system.

Answer 3

1. user can have more than 1 role
2. user can have not only roles but also permissions