This task is mostly about planning. When you add RBAC to your application, you will need to decide how the access to your system will be allocated. A good place to start is to look at the actions in your current system and the roles you think you will need.
Yii defines RBAC in terms of roles, tasks, and operations. An operation is a single action on an object. We will set its name as the object followed by the action. For example, the name for the operation consisting of the action
Create on the object
Book would be
bookCreate. A task is a named collection of operations. For example, you might collect all of the user management operations (
userView) into a single task named