yii权限控制的方法(三种方法)

public function filters()
{
  return array(
    'aessControl', // perform aess control for CRUD operations
  );
}
/
  Specifies the aess control rules.
  This method is used by the 'aessControl' filter.
  @return array aess control rules
 /
public function aessRules()
{
  return array(
    array('allow', // allow authenticated users to aess all actions
      'users'=>array('@'),
    ),
    array('deny', // deny all users
      'users'=>array(''),
    ),
  );
}

public function filters()
{
  return array(
    'rights',
  );
}

/
  @return array action filters
 /
public function filters()
{
  return array(
    'updateOwn + update', // Apply this filter only for the update action.
    'rights',
  );
}
/
  Filter method for checking whether the currently logged in user
  is the author of the post being aessed.
 /
public function filterUpdateOwn($filterChain)
{
  $post=$this->loadModel();
  // Remove the 'rights' filter if the user is updating an own post
  // and has the permission to do so.
  if(Yii::app()->user->checkAess('PostUpdateOwn', array('userid'=>$post->author_id)))
    $filterChain->removeAt(1);
  $filterChain->run();
}

public function allowedActions()
{
  return 'aulate,aulate2';
}