Код: Выделить всё
public function behaviors()
{
$behaviors = parent::behaviors();
$behaviors['authenticator']['only'] = ['update', 'delete', 'create'];
$behaviors['authenticator']['authMethods'] = [
HttpBasicAuth::className(),
HttpBearerAuth::className(),
];
$behaviors['access'] = [
'class' => AccessControl::className(),
'only' => ['update', 'delete', 'create'],
'rules' => [
[
'allow' => true,
'roles' => ['?'],
'actions' => ['create']
],
[
'allow' => true,
'roles' => ['@'],
'actions' => ['update', 'delete']
],
],
];
return $behaviors;
}