fixed access check from submodules

dmstr · May 20, 2020 · 04b3808 · 04b3808
1 parent a2026eb
commit 04b3808
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/traits/AccessBehaviorTrait.php b/src/traits/AccessBehaviorTrait.php
@@ -43,7 +43,9 @@ public function behaviors()
                         [
                             'allow'         => true,
                             'matchCallback' => function ($rule, $action) use ($controller) {
-                                $permission = str_replace('/','_',$controller->module->id . '_' . $controller->id . '_' . $action->id);
+                                // use id including parent modules, if empty (eg. 'app') fall-back to id
+                                $moduleId = empty($controller->module->uniqueId) ? $controller->module->id : $controller->module->uniqueId;
+                                $permission = str_replace('/','_', trim($moduleId,'/') . '_' . $controller->id . '_' . $action->id);
                                 return \Yii::$app->user->can(
                                     $permission,
                                     ['route' => true]
@@ -55,4 +57,4 @@ public function behaviors()
             ]
         );
     }
-}
+}