пример того, как разрешить пользователям редактировать только свою учетную запись без передачи идентификатора в URL.
public function edit()
{
$user = $this->Users->find()
->where(['id' => $this->Auth->user('id')])
->firstOrFail();
if ($this->request->is(['patch', 'post', 'put'])) {
$user = $this->Users->patchEntity($user, $this->request->getData());
if ($this->Users->save($user)) {
/$this->Flash->success(__('The user has been saved.'));
return $this->redirect(['action' => 'index']);
}
$this->Flash->error(__('The user could not be saved. Please, try again.'));
}
$this->set(compact('user'));
}