public function behaviors() { return ['access' => ['class' => AccessControl::className(), 'rules' => [['actions' => ['confirm', 'resend'], 'allow' => true, 'roles' => ['?', '@']], ['actions' => ['account', 'register', 'profile', 'resend-change', 'cancel', 'logout'], 'allow' => true, 'roles' => ['@']], ['actions' => ['login', 'forgot', 'reset'], 'allow' => true, 'roles' => ['?', '@']]]]]; }
public function behaviors() { return ['access' => ['class' => AccessControl::className(), 'denyCallback' => function ($rule, $action) { throw new UserException('You are not allowed to access this page'); }]]; }