$ips public property List of user IP addresses that this rule applies to. An IP address can contain the wildcard * at the end so that it matches IP addresses with the same prefix. For example, '192.168.*' matches all IP addresses in the segment '192.168.'. If not set or empty, it means this rule applies to all IP addresses. See also yii\web\Request::$userIP. public array $ips = null

$denyCallback public property A callback that will be called if this rule determines the access to the current action should be denied. If not set, the behavior will be determined by yii\filters\AccessControl. The signature of the callback should be as follows: function ($rule, $action) where $rule is this rule, and $action is the current action object. public callable $denyCallback = null

$controllers public property List of the controller IDs that this rule applies to. Each controller ID is prefixed with the module ID (if any). The comparison is case-sensitive. If not set or empty, it means this rule applies to all controllers. public array $controllers = null

$allow public property Whether this is an 'allow' rule or 'deny' rule. public boolean $allow = null

$actions public property List of action IDs that this rule applies to. The comparison is case-sensitive. If not set or empty, it means this rule applies to all actions. public array $actions = null

init() public method Initializes the $rules array by instantiating rule objects from configurations. public void init ( )

denyAccess() protected method Denies the access of the user. The default implementation will redirect the user to the login page if he is a guest; if the user is already logged, a 403 HTTP exception will be thrown. protected void denyAccess ( $user )$user yii\web\User The current user throws yii\web\ForbiddenHttpException if the user is already logged in.

beforeAction() public method This method is invoked right before an action is to be executed (after all possible filters.) You may override this method to do last-minute preparation for the action. public boolean beforeAction ( $action )$action yii\base\Action The action to be executed. return boolean Whether the action should continue to be executed.

$user public property The user object representing the authentication status or the ID of the user application component. Starting from version 2.0.2, this can also be a configuration array for creating the object. public yii\web\User|array|string $user = 'user'

$rules public property A list of access rule objects or configuration arrays for creating the rule objects. If a rule is specified via a configuration array, it will be merged with $ruleConfig first before it is used for creating the rule object. See also $ruleConfig. public array $rules = []