爲什麼Yii強制認證只能在主頁/靜態頁面上工作？

Question

我需要在YII應用程序的所有頁面上強制進行身份驗證。要做到這一點，我已經延長了SiteController類用下面的代碼，我從http://www.heirbaut.nl/2010/02/23/forcing-a-yii-application-to-authenticate/有：

/** 
* @return array action filters 
*/ 
public function filters(){ 
    return array(
     'accessControl', // perform access control for CRUD operations 
    ); 
} 

/** 
* Specifies the access control rules. 
* This method is used by the 'accessControl' filter. 
* @return array access control rules 
*/ 
public function accessRules(){ 
    return array(
     array('allow', // allow all users to perform 'login' 
      'actions'=>array('login'), 
      'users'=>array('*'), 
     ), 
     array('allow', // allow authenticated user to perform any action 
      'users'=>array('@'), 
     ), 
     array('deny', // deny all users 
      'users'=>array('*'), 
     ), 
    ); 
} 

這隻做什麼它應該，重定向unauthenticaed用戶的所有請求登錄表單，對於index.php URL。但是index.php?r=person和因此，應用程序的主菜單繞過這個限制，並顯示出來，無論任何保證。

Answer 1

每個控制器都需要引用該代碼。一種選擇是創建自己的控制器，擴展CController並將其放置在你的protected/components文件夾

class MyController extends CController{ 
    /** 
    * @return array action filters 
    */ 
    public function filters(){ 
     return array(
      'accessControl', // perform access control for CRUD operations 
     ); 
    } 

    /** 
    * Specifies the access control rules. 
    * This method is used by the 'accessControl' filter. 
    * @return array access control rules 
    */ 
    public function accessRules(){ 
     return array(
      array('allow', // allow authenticated user to perform any action 
       'users'=>array('@'), 
      ), 
      array('deny', // deny all users 
       'users'=>array('*'), 
      ), 
     ); 
    } 
} 

然後在您需要擴展MyController並覆蓋accessRules()添加任何額外的規則你的控制器類

public class SiteController extends MyController{ 

    ... 

    public function accessRules(){ 
     $rules=parent::accessRules(); 
     array_unshift($rules,array(
      'allow', // allow all users to perform 'login' 
      'actions'=>array('login'), 
      'users'=>array('*'), 
     )); 
     return $rules; 
    } 

    ... 
}