access control

Anastasia
1 parent 8c3af0d3
Showing 1 changed file with 17 additions and 0 deletions Show diff stats
controllers/ManageController.php
@@ -9,6 +9,7 @@
     use yii\filters\VerbFilter;
     use yii\web\Controller;
     use yii\web\NotFoundHttpException;
+    use yii\filters\AccessControl;
  
     class ManageController extends Controller
     {
@@ -32,6 +33,22 @@
                         'delete' => [ 'post' ],
                     ],
                 ],
+                'access' => [
+                    'class' => AccessControl::className(),
+                    'rules' => [
+                        [
+                            'actions' => [
+                                'login',
+                                'error',
+                            ],
+                            'allow'   => true,
+                        ],
+                        [
+                            'allow' => true,
+                            'roles' => [ '@' ],
+                        ],
+                    ],
+                ],
             ];
         }