[ 'class' => AccessControl::className(), 'rules' => [ [ 'allow' => true, 'roles' => ['@'], 'matchCallback' => function ($rule, $action) { /* @var $identity \app\models\User */ $identity = \Yii::$app->getUser()->getIdentity(); return $identity->is_admin; } ], ], ], ]; } }