Suggestions/extensions For Simplifying Rbac (Access Control) ? in The Yii Book Posted February 13, 2014 Everything about Yii is so straight-forward that I'm surprised that access control continues to appear difficult and complicated to me. So far I've avoided any need to do any authentication or user login (because the sites are locked down to an internal network). That will soon change. I expect to need a number of user logins, with a small number of roles. I'll have 10-20 logins spread across 6-8 roles. It's very small scale in that sense. 1. Does anyone have recommendations for an RBAC user management extension? I'd like the client to be able to manage users, and assignment of roles to users, without programmer intervention. 2. It seems like I should be able to implement a simple strategy for tying either entire controllers or specific controller actions to those roles. I'm not sure what that strategy is, but I haven't tried to do this yet either. Practice makes perfect!