如何安全的使用FckEditor? [ 新手入门 ]

fckeditor里有提示,不能直接设置为true,要考虑用户身份问题,那么yii的身份认证如何传递到这里来呢?读session吗?

global $Config ;

//SECURITY: You must explicitly enable this "connector". (Set it to "true").
//WARNING: don't just set "$Config['Enabled'] = true ;", you must be sure that only
//authenticated users can access this file or use some kind of session checking.
$Config['Enabled'] = false ;