Adjusted guide

docs/guide/authorization.md

@@ -121,71 +121,94 @@ class PhpManager extends \yii\rbac\PhpManager
 }
 ```
 
+Now create custom rule class:
+
+```php
+namespace app\rbac;
+
+use yii\rbac\Rule;
+
+class NotGuestRule extends Rule
+{
+    public function execute($params, $data)
+    {
+        return !Yii::$app->user->isGuest;
+    }
+}
+```
+
 Then create permissions hierarchy in `@app/data/rbac.php`:
 
 ```php
 <?php
 use yii\rbac\Item;
+use app\rbac\NotGuestRule;
+
+$notGuest = new NotGuestRule();
 
 return [
-    // HERE ARE YOUR MANAGEMENT TASKS
-    'manageThing0' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'bizRule' => NULL, 'data' => NULL],
-    'manageThing1' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'bizRule' => NULL, 'data' => NULL],
-    'manageThing2' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'bizRule' => NULL, 'data' => NULL],
-    'manageThing3' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'bizRule' => NULL, 'data' => NULL],
-
-    // AND THE ROLES
-    'guest' => [
-        'type' => Item::TYPE_ROLE,
-        'description' => 'Guest',
-        'bizRule' => NULL,
-        'data' => NULL
+    'rules' => [
+        $rule->name => serialize($notGuest),
     ],
+    'items' => [
+        // HERE ARE YOUR MANAGEMENT TASKS
+        'manageThing0' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'ruleName' => NULL, 'data' => NULL],
+        'manageThing1' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'ruleName' => NULL, 'data' => NULL],
+        'manageThing2' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'ruleName' => NULL, 'data' => NULL],
+        'manageThing3' => ['type' => Item::TYPE_OPERATION, 'description' => '...', 'ruleName' => NULL, 'data' => NULL],
+
+        // AND THE ROLES
+        'guest' => [
+            'type' => Item::TYPE_ROLE,
+            'description' => 'Guest',
+            'ruleName' => NULL,
+            'data' => NULL
+        ],
 
-    'user' => [
-        'type' => Item::TYPE_ROLE,
-        'description' => 'User',
-        'children' => [
-            'guest',
-            'manageThing0', // User can edit thing0
+        'user' => [
+            'type' => Item::TYPE_ROLE,
+            'description' => 'User',
+            'children' => [
+                'guest',
+                'manageThing0', // User can edit thing0
+            ],
+            'ruleName' => $notGuest->name,
+            'data' => NULL
         ],
-        'bizRule' => 'return !Yii::$app->user->isGuest;',
-        'data' => NULL
-    ],
 
-    'moderator' => [
-        'type' => Item::TYPE_ROLE,
-        'description' => 'Moderator',
-        'children' => [
-            'user',         // Can manage all that user can
-            'manageThing1', // and also thing1
+        'moderator' => [
+            'type' => Item::TYPE_ROLE,
+            'description' => 'Moderator',
+            'children' => [
+                'user',         // Can manage all that user can
+                'manageThing1', // and also thing1
+            ],
+            'ruleName' => NULL,
+            'data' => NULL
         ],
-        'bizRule' => NULL,
-        'data' => NULL
-    ],
 
-    'admin' => [
-        'type' => Item::TYPE_ROLE,
-        'description' => 'Admin',
-        'children' => [
-            'moderator',    // can do all the stuff that moderator can
-            'manageThing2', // and also manage thing2
+        'admin' => [
+            'type' => Item::TYPE_ROLE,
+            'description' => 'Admin',
+            'children' => [
+                'moderator',    // can do all the stuff that moderator can
+                'manageThing2', // and also manage thing2
+            ],
+            'ruleName' => NULL,
+            'data' => NULL
         ],
-        'bizRule' => NULL,
-        'data' => NULL
-    ],
 
-    'godmode' => [
-        'type' => Item::TYPE_ROLE,
-        'description' => 'Super admin',
-        'children' => [
-            'admin',        // can do all that admin can
-            'manageThing3', // and also thing3
+        'godmode' => [
+            'type' => Item::TYPE_ROLE,
+            'description' => 'Super admin',
+            'children' => [
+                'admin',        // can do all that admin can
+                'manageThing3', // and also thing3
+            ],
+            'ruleName' => NULL,
+            'data' => NULL
         ],
-        'bizRule' => NULL,
-        'data' => NULL
     ],
-
 ];
 ```