fix backend user access, fix payout cart account change

backend/controllers/CardPackageController.php

@@ -21,20 +21,26 @@ use common\components\Upload;
 /**
  * CardPackageController implements the CRUD actions for CardPackage model.
  */
-class CardPackageController extends Controller {
-	public function behaviors() {
-		return [ 
-				'verbs' => [ 
-						'class' => VerbFilter::className (),
-						'actions' => [ 
-								'delete' => [ 
-										'post' 
-								] 
-						] 
-				] 
+class CardPackageController extends  \backend\controllers\BackendController {
+	
+	
+	public function behaviors()
+	{
+		return [
+				'access' => [
+						'class' => \yii\filters\AccessControl::className(),
+						'rules' => [
+								// allow authenticated users
+								[
+										'actions' => ['create','index','view','import','download'],
+										'allow' => true,
+										'roles' => ['admin','employee','reception'],
+								],
+								// everything else is denied
+						],
+				],
 		];
 	}
-	
 	/**
 	 * Lists all CardPackage models.
 	 *