$roles public property
List of roles that this rule applies to. Two special roles are recognized, and they are checked via yii\web\User::$isGuest:
?: matches a guest user (not authenticated yet)
@: matches an authenticated user If you are using RBAC (Role-Based Access Control), you may also specify role or permission names. In this case, yii\web\User::can() will be called to check access. If this property is not set or empty, it means this rule applies to all roles.
public array $roles =