Merge pull request #34 from schmunk42/master

added accessRoles param to configure access control

Module.php

@@ -25,7 +25,12 @@ class Module extends \yii\base\Module
      * @var string source language for translation 
      */
     public $sourceLanguage = 'en-US';
-
+
+    /**
+     * @var null|array The roles which have access to module controllers, eg. ['admin']. If set to `null`, there is no accessFilter applied
+     */
+    public $accessRoles = null;
+
     /**
      * Init module
      */

controllers/DefaultController.php

@@ -12,6 +12,7 @@
 use pheme\settings\models\Setting;
 use pheme\settings\models\SettingSearch;
 use pheme\grid\actions\ToggleAction;
+use yii\filters\AccessControl;
 use yii\web\Controller;
 use yii\web\NotFoundHttpException;
 use yii\filters\VerbFilter;
@@ -36,6 +37,15 @@ public function behaviors()
                     'delete' => ['post'],
                 ],
             ],
+            'access' => [
+                'class' => AccessControl::className(),
+                'rules' => [
+                    [
+                        'allow' => true,
+                        'roles' => $this->module->accessRoles,
+                    ],
+                ],
+            ],
         ];
     }