Filters and Access Rules

[infoitservit]

I'm trying to use filters and access rules, but it seems to go wrong. Simply, it don't works. It don't recognize users and/or actions, i really don't know. I'm pretty sure about the name of the actions, so i don't know what's up here.

  public function filters()
    {
        return array(
            'accessControl'
        );
    }

    public function accessRules()
    {
        return array(
          array(
                'allow',
                'actions' => array('nuovo', 'concludinuovo'),
                'users' => array('@'),
            ),
           array('deny'),
        );
    }

[hijarian]

1. Did you read the documentation about CAccessControlFilter, CController.filters, CController.accessRules and Definitive Guide page about access control filter?
2. What entry point you're using, backend or frontend? Because on backend you already have access rules defined on base BackendController class.
3. What is the exact error/misbehavior you're getting?

I just have created simplest possible access control definition on frontend, inside the FrontendSiteController, using the following methods:

 public function actionFirst()
    {
        echo '1';
    }

    public function actionSecond()
    {
        echo '2';
    }

    public function actionLogin()
    {
        Yii::app()->user->login(new DemoIdentity('demo', 'demo'));
    }

    public function actionLogout()
    {
        Yii::app()->user->logout();
    }

    public function filters()
    {
        return array(
            'accessControl'
        );
    }

    public function accessRules()
    {
        return array(
            array(
                'allow',
                'actions' => array('first', 'login')
            ),
            array(
                'allow',
                'actions' => array('second', 'logout'),
                'users' => array('@'),
            ),
            array('deny'),
        );
    }

class DemoIdentity extends CUserIdentity
{
    public function authenticate()
    {
        return true;
    }
}

And get the expected behavior: "second" and "logout" actions accessible only when you're logged in.

I did the same trick on backend:

class AccessController extends BackendController
{

    public function actionFirst()
    {
        echo '1';
    }

    public function actionSecond()
    {
        echo '2';
    }

    public function actionLogin()
    {
        Yii::app()->user->login(new DemoIdentity('demo', 'demo'));
    }

    public function actionLogout()
    {
        Yii::app()->user->logout();
    }

    public function filters()
    {
        return array(
            'accessControl'
        );
    }

    public function accessRules()
    {
        return array(
            array(
                'allow',
                'actions' => array('first', 'login')
            ),
            array(
                'allow',
                'actions' => array('second', 'logout'),
                'users' => array('@'),
            ),
            array('deny'),
        );
    }
}

class DemoIdentity extends CUserIdentity
{
    public function authenticate()
    {
        return true;
    }
}

And got the same result. So I infer that you just have some misconfiguration in your own codebase.