public function actionUpdate($id) { $model = new Access2(); //$submodule1 = SubModule::find()->where(['module_id' => 1])->orderBy('sub_module_id')->all(); //$submodule2 = SubModule::find()->where(['module_id' => 2])->orderBy('sub_module_id')->all(); $currentaccess = Access2::find()->where(['user_id' => $id])->all(); $newPermission = new Access2(); $dropmodule = NULL; if (isset($_POST['Access2']['permission'])) { $permissionList = $_POST['Access2']['permission']; $dropmodule = Access2::deleteAll(['and', 'user_id = :user_id', ['not in', 'sub_module_id', $permissionList]], [':user_id' => $id]); if ($permissionList != NULL) { foreach ($permissionList as $value) { $checkmodule = Access2::find()->where(['user_id' => $id, 'sub_module_id' => $value])->one(); if ($checkmodule == NULL) { $newPermission = new Access2(); $newPermission->user_id = $id; $newPermission->sub_module_id = $value; $newPermission->save(); } } } } if ($newPermission->save()) { return $this->redirect(['index']); } elseif ($newPermission->load(Yii::$app->request->post())) { return $this->redirect(['index']); } else { return $this->render('update', ['model' => $model, 'currentaccess' => $currentaccess]); } }