for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
namespace app\components;
class User extends \yii\web\User
{
public function init()
parent::init();
if (!$this->getIsGuest() && !$this->getIdentity()->isActive()) {
$this->logout();
}
/**
* Checks if the user can perform the operation as specified by the given permission.
*
* Note that you must configure "authManager" application component in order to use this method.
* Otherwise an exception will be thrown.
* @param string $permissionName the name of the permission (e.g. "edit post") that needs access check.
* @param array $params name-value pairs that would be passed to the rules associated
* with the roles and permissions assigned to the user. A param with name 'user' is added to
* this array, which holds the value of [[id]].
* @param boolean $allowCaching whether to allow caching the result of access check.
* When this parameter is true (default), if the access check of an operation was performed
* before, its result will be directly returned when calling this method to check the same
* operation. If this parameter is false, this method will always call
* [[\yii\rbac\ManagerInterface::checkAccess()]] to obtain the up-to-date access result. Note that this
* caching is effective only within the same request and only works when `$params = []`.
* @return boolean whether the user can perform the operation as specified by the given permission.
*/
public function can($permissionName, $params = [], $allowCaching = true)
if (!$this->getIsGuest() && $this->getIdentity()->isSuperUser()) {
return true;
return parent::can($permissionName, $params, $allowCaching);
rkit /
bootstrap-yii2
