yii2-如何限制用户在索引页面中查看其他数据

Question

我在项目中正在研究yii2，我有用户及其角色。每个角色都可以访问模块和子菜单。有一个名为SIM List的子菜单，其中所有SIM记录都可以查看。有一个名为issued_to的字段，它告诉我们向哪个用户发出了哪些SIM卡。

除非向任何用户发出SIM，否则issued_to字段将保持空。发出后，用户的名称将出现在SIM List上。

现在，我想以一种只有特定用户才能看到列表的方式进行管理。例如，5 Sims已发出给名为U的用户。现在，用户U只能看到发给他的SIM卡记录，否则列表应为空。

在我的Index控制器中，我正在获取issued_to字段名称，该字段名称默认为空。

 public function actionIndex()
{
    $searchModel = new SimsSearch();
    $dataProvider = $searchModel->search(Yii::$app->request->queryParams);
    return $this->render('index', [
        'searchModel' => $searchModel,
        'dataProvider' => $dataProvider,
    ]);
}

通过像下面这样做，我可以获得issued_to用户ID

$model = $dataProvider->getModels()[0];
$user_id =  $model['issued_to'];
var_dump($user_id);
exit();

现在，在此控制器中，我想添加一张user_id的检查，该检查仅给我为该特定用户的记录。

索引视图

<?= GridView::widget([
    'dataProvider' => $dataProvider,
    'filterModel' => $searchModel,
    'columns' => [
        ['class' => 'yiigridSerialColumn'],
        //'id',
        'imsi',
        'sim_number',
        'operator_name',
        'data_details',
        'sms_details',
        'monthly_bill',
        //'created_by',
        [
            'label' => 'Created By',
            'value' => function ($data) {
                if (is_object($data))
                    return $data->created->name;
                return ' - ';
            },
            //'filter' => Html::activeDropDownList($searchModel, 'created_by', appmodelsUser::toArrayList(), ['prompt' => "Created By", 'class' => 'form-control']),
        ],
        'created_at',
        // 'updated_at',
        'status',
        // 'updated_by',
        //'sim_stauts',
        [
            'label'=>'SIM Status',
            'value'=>function($a){
                return $a->getStatusvalue();
            }
        ],
        //'issued_to',
        [
            'label' => 'Issued To',
            'value' => function ($d) {
                if(is_object($d->user))
                    //return $d->user->name;
                    return $d->issued_to == '' ? '' : $d->user->username;
                return ' - ';
                // return $d->user->name;
            },
            'filter' => Html::activeDropDownList($searchModel, 'issued_to', appmodelsUser::toArrayList(), ['prompt' => "Users", 'class' => 'form-control']),
        ],
       //'returned_by',
        [
            'label' => 'Returned By',
            'value' => function ($d) {
                if(is_object($d->user2))
                    //return $d->user->name;
                    return $d->returned_by == '' ? '' : $d->user->username;
                return ' - ';
                // return $d->user->name;
            },
            'filter' => Html::activeDropDownList($searchModel, 'returned_by', appmodelsUser::toArrayList(), ['prompt' => "Users", 'class' => 'form-control']),
        ],
        'historic',
        ['class' => 'yiigridActionColumn'],
    ],
]); ?>

更新1

我的 search model在

以下

public function search($params)
{
    $query = Sims::find();
    // add conditions that should always apply here
    $dataProvider = new ActiveDataProvider([
        'query' => $query,
    ]);
    $this->load($params);
    if (!$this->validate()) {
        // uncomment the following line if you do not want to return any records when validation fails
        // $query->where('0=1');
        return $dataProvider;
    }
    // grid filtering conditions
    $query->andFilterWhere([
        'id' => $this->id,
        'created_by' => $this->created_by,
        'created_at' => $this->created_at,
        'updated_at' => $this->updated_at,
        'updated_by' => $this->updated_by,
        'sim_stauts' => $this->sim_stauts,
        'issued_to' => $this->issued_to,
        'returned_by' => $this->returned_by,
        'historic' => $this->historic,
    ]);
    $query->andFilterWhere(['like', 'imsi', $this->imsi])
        ->andFilterWhere(['like', 'sim_number', $this->sim_number])
        ->andFilterWhere(['like', 'operator_name', $this->operator_name])
        ->andFilterWhere(['like', 'data_details', $this->data_details])
        ->andFilterWhere(['like', 'sms_details', $this->sms_details])
        ->andFilterWhere(['like', 'monthly_bill', $this->monthly_bill])
        ->andFilterWhere(['like', 'status', $this->status]);
    return $dataProvider;
}

我该如何实现？任何帮助都将不胜感激。

Answer 1

根据您的描述，您的user_id保存在issued_to字段中，您只需要获取将当前记录的结果保存在user_id中的结果issued_to。

。

我假设您在网格视图中仅可登录用户可以看到您的搜索。

您应该先从request对象Yii::$app->request->queryParams;获取queryParams数组，该数组的阵列的格式与POST具有I.e ['ModelName']['field_name'] ，因此您需要Infort issued_to设置CC_25AS

$arrayParams['SimSearch']['issued_to']=Yii:$app->user->id;

您的actionIndex应该像下面的

public function actionIndex()
{
    $searchModel = new SimsSearch();
    $queryParams=Yii::$app->request->queryParams;
    //check if user or one of the managers
    $isAdmin=in_array(Yii::$app->user->identity->user_role,[1,6]);
    //set params if normal user
    if(!$isAdmin){
       $queryParams['SimsSearch']['issued_to']=Yii::$app->user->id;
    }
    $dataProvider = $searchModel->search($queryParams);
    return $this->render('index', [
        'searchModel' => $searchModel,
        'dataProvider' => $dataProvider,
    ]);
}

希望这对您有帮助。