Describe the bug An error occurred while trying to create the RBAC model.

array_combine(): Both parameters should have an equal number of elements

Check the error code address and find that the error exists in line CoreEnforcer.php 645

{ "file": "E:\\phpstudy_pro\\WWW\\c.com\\vendor\\casbin\\casbin\\src\\CoreEnforcer.php", "line": 645, "function": "array_combine", "args": [ [ "p_sub", "p_obj", "p_act" ], [ "测试, /admin/setup/wx", "ANY" ] ] }

It processes "test" and "/ admin / setup / Wx" into one field. The correct one should be

[ "测试“, ”/admin/setup/wx", "ANY" ]

** php version ** 7.3

** SQL version ** 5.7.26

** casbin version ** casbinPHP V3.19.0

** plug-in ** casbin/database-adapter V1.6.0

laravel-authz, version 3.1.1 php-casbin, version 3.20.3

conf

[request_definition]
r = admin_id, site_id, permission_name

[policy_definition]
p = group_id, site_id, permission_name

[role_definition]
g = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.admin_id, p.group_id) && r.site_id == p.site_id && r.permission_name == p.permission_name

if policy like below

p, 4,2, read
p, 2,4, read

g, 1, 2
g2, 2,4

request

Enforcer::enforce('1', '2', 'read'); // true

I think it should be false, but I got true.

but if I delete last row in policy like this

p, 4,2, read
p, 2,4, read

g, 1, 2

request

Enforcer::enforce('1', '2', 'read'); // false

The request got false that I want it. How to correct the configuration to achieve the results what I need, can someone help me, pls?

I tried https://casbin.org/casbin-editor/, request got false both policy above.

Lets assume this code:

if (!$m->hasPolicy('g', 'g2', $rule)) {
    $m->addPolicy('g', 'g2', $rule);  
    $e->savePolicy();
}

If $rule = [ '0', '1' ];, everything works as expected, but if $rule = [ 0, 1 ];, the $m->hasPolicy always evaluates to false. I'm not sure, why php doesn't throw an exception, because https://github.com/php-casbin/php-casbin/blob/ecc5eb20ab6669045b892247b080853483d7a17d/src/Model/Policy.php#L120 requires string and should fail on an int due to declare(strict_types=1); on https://github.com/php-casbin/php-casbin/blob/ecc5eb20ab6669045b892247b080853483d7a17d/src/Model/Policy.php#L3

Can anyone reproduce this?

I am trying yii-permission , and post an issue.

https://github.com/php-casbin/yii-permission/issues/6

Becasue every request will query all data from casbin_rule, If i have many domain and user , the result will be very large.

I think FilteredAdapter may fix the problem , but I can not find any example for php version. Anyone who has implemented it for mysql( or any database ) ? please provide it , thanks.

Hi I am trying examples/rbac_with_domain_pattern_model.conf I load rbac_with_domain_pattern_policy.csv

I use latest version(2.3.0)

My code

<?php require_once './vendor/autoload.php';

use Casbin\Enforcer;

$e = new Enforcer("config/casbin_model.conf", "config/casbin_policy.csv");

$sub = "alice"; // the user that wants to access a resource.
$obj = "data1"; // the resource that is going to be accessed.
$dom = "domain1";
$act = "read"; // the operation that the user performs on the resource.

var_dump($e->enforce($sub, $dom, $obj, $act));

it dump false When I change $sub = "bob" , $dom t="domain2" , $obj="data2" , it dump true. Why alice no perssion ? does this version support wildcard(*) ?

Hi guys,

version: casbin/casbin v3.3.0

here the conf and the policy I am trying to use:

[request_definition]
r = sub, dom, act

[policy_definition]
p = sub, dom, act, eft

[role_definition]
g = _, _, _

[policy_effect]
e = some(where (p.eft == allow)) && !some(where (p.eft == deny))

[matchers]
m = g(r.sub, p.sub, r.dom) && r.dom == p.dom && r.act == p.act

p, admin_domain1, domain1, read, allow
p, admin_domain1, domain1, write, allow
p, admin_domain2, domain2, read, allow
p, admin_domain2, domain2, write, allow
g, alice, admin_domain1, domain1
g, bob, admin_domain2, domain2

Now, when I want to test:

        $this->assertTrue($enforcer->enforce('alice', 'domain1', 'read')); // <--- pass
        $this->assertTrue($enforcer->enforce('alice', 'domain1', 'write')); // <--- pass

        $this->assertFalse($enforcer->enforce('alice', 'domain2', 'read')); // <--- fail
        $this->assertFalse($enforcer->enforce('alice', 'domain2', 'write')); // <--- fail

        $this->assertFalse($enforcer->enforce('bob', 'domain1', 'read')); // <--- fail
        $this->assertFalse($enforcer->enforce('bob', 'domain1', 'write')); // <--- fail

        $this->assertTrue($enforcer->enforce('bob', 'domain2', 'read')); // <--- pass
        $this->assertTrue($enforcer->enforce('bob', 'domain2', 'write')); // <--- pass

What is wrong with my workflow? Since alice is not related at all with domain2, the assert should return false, but here, it returns true.

I tried also with the following matcher: m = r.sub == p.sub && r.dom == p.dom && r.act == p.act but same result

Thank you for your help.

https://github.com/php-casbin/php-casbin/blob/8d6d87011f2c024af409d71534197c50c9767491/src/Enforcer.php#L556 A variable $expression is initialized as ExpressionLanguage, and then used as function argument where Expression is required. In most cases it is redefined by value returned from $expressionLanguage->parse(...) method, but in one case it is used unchanged: https://github.com/php-casbin/php-casbin/blob/8d6d87011f2c024af409d71534197c50c9767491/src/Enforcer.php#L636 It results in a fatal error with message:

Object of class Symfony\Component\ExpressionLanguage\ExpressionLanguage could not be converted to string

If I have 5 domains. I want define to :

• domain/1 : This domain has child domain 2 and 3.
• domain/1/2
• domain/1/3
• domain/4 : This domain has child domain 5
• domain/4/5

I want domain/1 admin has full access permision , also has full acess permission on domain/1/* , domain/4 admin has full access on domain/4/*.

so policy maybe

p, admin, domain/:domainId, data, read
p, admin, domain/:domainId, data, write
p, admin, domain/:domainId/:domainId, data, read
p, admin, domain/:domainId/:domainId, data, write

g, alice, admin, domain/1
g, alice, admin, domain/1/*
g, bob, admin, domain/1/2
g, mary, admin, domain/1/3

alice has full access permission on domain/1/2 and domain/1/3 , bob only has access on domain/1/2

Is it possibile ?

As the authorization gets more complex, it would be nice to add comments/description to i.e. roles. Would it be possible to have $m->addPolicy('g', 'g', $rule, 'this role has a comment'); ? Thanks!

I am trying to download the packages by running the following command: composer require casbin/casbin but i got following while running it:

./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - The requested package casbin/casbin No version set (parsed as 1.0.0) is satisfiable by casbin/casbin[No version set (parsed as 1.0.0)] but these conflict with your requirements or minimum-stability.


Installation failed, reverting ./composer.json to its original content.

Can anyone let me know what is the problem?

I tried to set up my policies using the Casbin Editor, resulting in the following model:

See https://casbin.org/casbin-editor/#3QDUJPSUG or code below: Model:

[request_definition]
r = sub, dom, obj, act

[policy_definition]
p = sub, dom, obj, act

[role_definition]
g = _, _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub, r.dom) && keyMatch2(r.dom, p.dom) && keyMatch2(r.obj, p.obj) && keyMatch2(r.act, p.act)

Policy:

p, role, *, *, action
g, username, role, *

Request:

username, domain, object, action
username, *, object, action

In the online editor, both request statements 1 and 2 get enforcement result "true", as expected. Using the PHP library however, request statement 1 returns "false" using following method:

(new Casbin\Enforcer())->enforce('username', 'domain', 'object', 'action'); 

I assume that the keyMatch() method is not applied to the group domain wildcard *.

Hello, I try to use multiple policies as mentioned in documentation and I got some exceptions.

Model:

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act
p2 = sub, act

[role_definition]
g = _, _
g2 = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub) && g2(r.obj, p.obj) && r.act == p.act

Policy:

p, alice, data1, read
p, bob, data2, write
p2, data_group_admin, write

g, alice, data_group_admin
g2, data1, data_group
g2, data2, data_group

PHP:

<?php

require_once './vendor/autoload.php';

use Casbin\Enforcer;
use Casbin\Model\Model;
use Casbin\Persist\Adapters\FileAdapter;

$model = Model::newModelFromFile('casbin/model.conf');
$adapter = new FileAdapter("casbin/policy.csv");
$e = new Enforcer($model, $adapter);

var_dump($e->enforce("alice", "write"));

Exception:

/Users/bastien/PhpstormProjects/testcasbin/vendor/casbin/casbin/src/CoreEnforcer.php:799:
array(2) {
  [0] =>
  string(5) "alice"
  [1] =>
  string(5) "write"
}
PHP Fatal error:  Uncaught Casbin\Exceptions\CasbinException: invalid request size: expected 3, got 2 in /Users/bastien/PhpstormProjects/testcasbin/vendor/casbin/casbin/src/CoreEnforcer.php:618
Stack trace:
#0 /Users/bastien/PhpstormProjects/testcasbin/vendor/casbin/casbin/src/CoreEnforcer.php(801): Casbin\CoreEnforcer->enforcing('', Array, 'alice', 'write')
#1 /Users/bastien/PhpstormProjects/testcasbin/test.php(13): Casbin\CoreEnforcer->enforce('alice', 'write')
#2 {main}
  thrown in /Users/bastien/PhpstormProjects/testcasbin/vendor/casbin/casbin/src/CoreEnforcer.php on line 618

Fatal error: Uncaught Casbin\Exceptions\CasbinException: invalid request size: expected 3, got 2 in /Users/bastien/PhpstormProjects/testcasbin/vendor/casbin/casbin/src/CoreEnforcer.php on line 618

Casbin\Exceptions\CasbinException: invalid request size: expected 3, got 2 in /Users/bastien/PhpstormProjects/testcasbin/vendor/casbin/casbin/src/CoreEnforcer.php on line 618

Call Stack:
    0.0006     396368   1. {main}() /Users/bastien/PhpstormProjects/testcasbin/test.php:0
    0.0094    1166224   2. Casbin\CoreEnforcer->enforce(...$rvals = variadic('alice', 'write')) /Users/bastien/PhpstormProjects/testcasbin/test.php:13
    0.0094    1166664   3. Casbin\CoreEnforcer->enforcing($matcher = '', $explains = [], ...$rvals = variadic('alice', 'write')) /Users/bastien/PhpstormProjects/testcasbin/vendor/casbin/casbin/src/CoreEnforcer.php:801