public function authorize(Controller $controller) { if (!$controller->isAjax()) { throw new UserError('This action is only accessible through AJAX requests'); } $controller->disableDecorator(); return true; }