<?php
namespace console\controllers;


use console\rbac\AuthorRule;
use Yii;
use yii\console\Controller;


class RbacController extends Controller
{
    public function actionInit()
    {
        $auth = Yii::$app->authManager;

        /**
         * Permissions
         */

        // create and add "createPost" permission
        $createPost = $auth->createPermission('createPost');
        $createPost->description = 'User can create a post';
        $auth->add($createPost);

        // create and add "updatePost" permission
        $updatePost = $auth->createPermission('updatePost');
        $updatePost->description = 'User can update post';
        $auth->add($updatePost);



        /**
         * Roles
         */

        // create and add "user" role
        $user = $auth->createRole('user');
        $auth->add($user);

        // create and add "author" role
        $author = $auth->createRole('author');
        $auth->add($author);

        // create and add "admin" role
        $admin = $auth->createRole('admin');
        $auth->add($admin);

        /**
         * Mutual connections
         */

        // "author" can create new Post
        $auth->addChild($author, $createPost);

        // "admin" can do everything what "author" can
        $auth->addChild($admin, $author);
        // ... and ...
        // "admin" can update ALL Posts
        $auth->addChild($admin, $updatePost);

        $auth = Yii::$app->authManager;

// add the rule
        $rule = new AuthorRule();
        $auth->add($rule);

// add the "updateOwnPost" permission and associate the rule with it.
        $updateOwnPost = $auth->createPermission('updateOwnPost');
        $updateOwnPost->description = 'Update own post';
        $updateOwnPost->ruleName = $rule->name;
        $auth->add($updateOwnPost);

// "updateOwnPost" will be used from "updatePost"
        $auth->addChild($updateOwnPost, $updatePost);

// allow "author" to update their own posts
        $auth->addChild($author, $updateOwnPost);

    }


}