/** * @param int $project_id * @return TicketGroup * @throws ModelValidateException * @throws ForbiddenHttpException */ public function actionCreate($project_id) { $project = Project::find()->byId($project_id)->oneOrThrow(); if ($project->getOwnerId() != \Yii::$app->getUser()->getId()) { throw new ForbiddenHttpException(); // todo-rbac } $data = \Yii::$app->getRequest()->post(); $data['project_id'] = $project_id; $group = new TicketGroup(); if ($group->create($data)) { return $group; } else { throw new ModelValidateException($group); } }