add role checking to controllers

2015-11-05 17:24:09 +01:00
parent 43d5598f23
commit cc83ccf761
39 changed files with 362 additions and 78 deletions
--- a/backend/controllers/BackendController.php
+++ b/backend/controllers/BackendController.php
@@ -28,7 +28,7 @@ class BackendController extends Controller
        						[
        								'actions' => ['create','index','view','update'],
        								'allow' => true,
-        								'roles' => ['@'],
+        								'roles' => ['admin','employee','reception'],
        						],
        						// everything else is denied
        				],