Doubt abou ACF

Hello friends.

I´m reading the tutorial abou ACF:

http://www.yiiframework.com/doc-2.0/guide-security-authorization.html#access-control-filter

And I have some doubt.

I need only users authenticated has access all action in my controller called MedicalController, in this case I created this:




class MedicalController extends Controller

{

    public function behaviors()

    {

        return [

            'access' => [

                'class' => AccessControl::className(),

                'only' => ['login'],

                'rules' => [

                    [

                        'allow' => true,

                        'actions' => ['add', 'edit', 'changes'],

                        'roles' => ['@'],

                    ],

                    [

                        'allow' => true,

                        'actions' => ['logout'],

                        'roles' => ['@'],

                    ],

                ],

            ],

        ];

    }

    // ...

}



This line:

‘class’ => AccessControl::className(),

‘only’ => [‘login’],

What means this className()?

This ‘only’ => [‘login’] means that user need authenticated?

This part, I wrote what I did. This correct?




'rules' => [

                    [

                        'allow' => true, //allow access

                        'actions' => ['add', 'edit', 'changes'], //specific actions

                        'roles' => ['@'], // only user athenticated

                    ],

                    [ //whats means this block? 

                        'allow' => true,

                        'actions' => ['logout'],

                        'roles' => ['@'],

                    ],

                ],



Hello friends.

I read again and with less sleep. Now understood kkk

This block:




[

                        'allow' => true,

                        'actions' => ['show'],

                        'roles' => ['?'],

                    ],




User not authenticated can access the action ‘show’

This block




[

                        'allow' => true,

                        'actions' => ['add', 'edit', 'changes'],

                        'roles' => ['@'],

                    ],




Only authenticated users can access actions ‘add’, ‘edit’, ‘changes’.

But I dont understood this lines:

‘class’ => AccessControl::className(),

‘only’ => [‘login’],