2

在我的控制器中，我有

    /**
 * @return array action filters
 */
public function filters()
{
    return array(
        'accessControl', // perform access control for CRUD operations
    );
}

/**
 * Specifies the access control rules.
 * This method is used by the 'accessControl' filter.
 * @return array access control rules
 */
public function accessRules()
{
    return array(
        array('allow',  // allow all users to perform 'index' and 'view' actions
            'actions'=>array('index','view'),
            'users'=>array('*'),
        ),
        array('allow', // allow players to comment on games
            'actions'=>array('createComment'),
            'roles'=>array('createComment'),
        ),
  array('allow', // allow users to update and delete their own comments
    'actions'=>array('deleteComment'),
    'expression'=>'return $user->id==Game::model()->findByPk(Yii::app()->getRequest()->getQuery("id"))->author->id;',
  ),
        array('allow', // allow admin users to create, update, delete and manage games
            'actions'=>array('admin','create','update','delete','deleteComment'),
    'roles'=>array('admin'),
        ),
        array('deny',  // deny all users
            'users'=>array('*'),
        ),
    );
}

但由于某种原因，deleteComment 上的表达式总是给我一个 403 错误（未经授权）。即使我已经测试了那个表达并且得到了真实。甚至把'表达式'=>'return true;' 不起作用。:( 我完全糊涂了......有什么想法吗？谢谢，布拉德（：

4

1 回答 1

10

return你在你的表达的开头有一个额外的。Yii已经添加了一个，所以有两个会导致语法错误。删除你的，你会很高兴的。

于 2012-04-10T22:32:21.297 回答