rstech / yii2-consent-pro

v0.14.0 2026-09-09 08:59 UTC

Requires

• php: >=7.4
• ext-mbstring: *
• rstech/yii2-consent: ^0.18.0
• yiisoft/yii2: ^2.0.49

Suggests

• ext-curl: Required only for explicit remote license refresh via consent-pro/license-refresh.
• ext-zip: Recommended for ZIP evidence packages; without it Pro falls back to a tar.gz archive when PharData is available.

proprietary

• Audit
• license
• yii2
• privacy
• pro
• consent
• gdpr
• compliance
• CCPA

Published on Packagist.org on 2026-09-09 09:41 UTC

README

rstech/yii2-consent-pro is the commercial Privacy Operations add-on for rstech/yii2-consent. Core keeps consent enforcement local and autonomous; Pro adds operational control, evidence, monitoring, DSAR workflows, policy/version management and administrator tooling.

Current release: 0.14.0 · requires Core: ^0.18.0 · Pro DB schema: 5

Canonical repository: https://gitlab.restsolution.tech/rstech/yii2-consent-pro.git

Install

composer require rstech/yii2-consent:^0.18
composer require rstech/yii2-consent-pro:^0.13

php yii consent/wizard
php yii consent/install
php yii consent-pro/wizard
php yii consent-pro/install

Then configure the license secrets, refresh the signed entitlement and run the readiness check:

export RSTECH_CONSENT_PRO_LICENSE_KEY='RSTC-...'
export RSTECH_CONSENT_PRO_PUBLIC_KEY='BASE64_ED25519_PUBLIC_KEY'

php yii consent-pro/license-refresh
php yii consent-pro/doctor

The complete production flow, private GitLab/VCS Composer setup, environment variables, RBAC, cron, DSAR encryption and upgrades is in docs/INSTALL.md.

Что добавляет Pro

• Privacy Operations dashboard;
• visual/advanced audit и понятный risk score;
• vendor discovery и контроль изменений между проверками;
• continuous monitoring и alerts;
• compliance HTML reports;
• aggregated consent analytics без добавления стороннего tracker;
• evidence packages с hashes/manifests;
• history/diff редакций политики и re-consent rules;
• публичный stateless DSAR intake и защищённая DSAR-админка;
• Visual Consent Builder;
• Data Processing Registry с immutable revisions;
• multi-site registry;
• premium integrations;
• granular RBAC;
• signed offline entitlement с primary/fallback license endpoints.

License model

Pro никогда не отключает Free-функции. License Server выдаёт только дополнительные capabilities. Visitor requests не ждут ответа license-server: клиент использует локально проверенный Ed25519 entitlement.

Планируемые endpoints:

https://license.validate.restsolution.tech
https://license.validate.webrove.tech

Refresh выполняется явно:

php yii consent-pro/license-refresh

Recommended config

consent-pro/wizard создаёт безопасный config и не записывает license/DSAR secrets в файл. Они читаются из environment:

RSTECH_CONSENT_PRO_LICENSE_KEY
RSTECH_CONSENT_PRO_PUBLIC_KEY
RSTECH_CONSENT_PRO_DSAR_KEY

Для публичной DSAR-формы RSTECH_CONSENT_PRO_DSAR_KEY должен быть отдельным секретом длиной не менее 32 символов.

Operations

php yii consent-pro/status
php yii consent-pro/doctor
php yii consent-pro/audit
php yii consent-pro/monitor
php yii consent-pro/schedule enable 1440
php yii consent-pro/scheduled
php yii consent-pro/evidence

Cron может запускать php yii consent-pro/scheduled ежечасно; Pro сам определяет, наступило ли время аудита конкретного сайта.

Upgrade model

Pro использует convergent schema management. Можно обновиться с любой поддерживаемой предыдущей schema напрямую:

composer update rstech/yii2-consent rstech/yii2-consent-pro
php yii consent/upgrade
php yii consent-pro/upgrade
php yii consent/doctor
php yii consent-pro/doctor

Documentation

• Installation
• Setup Wizard
• Operations
• Visual Builder
• Policy Manager
• Processing Registry
• DSAR
• License Server contract
• Upgrade model
• Release checklist

License

Proprietary commercial package. Free/Core remains MIT and autonomous.

Operator task queue

php yii consent-pro/tasks
php yii consent-pro/tasks json

The same prioritized queue appears on the Pro dashboard and combines audit findings, risk alerts, DSAR deadlines, re-consent flags, monitoring state and the processing registry.

Re-consent campaigns

Pro can create, activate and finish site-scoped re-consent campaigns. Activation publishes a presentation-independent runtime contract consumed by Core; decisions issued before force_after are requested again and campaign metadata is written into receipts/evidence.

php yii consent-pro/reconsent-list
php yii consent-pro/reconsent-create
php yii consent-pro/reconsent-activate CAMPAIGN_ID

Additional operations documentation

• Re-consent campaigns