public function behaviors() { return ['access' => ['class' => CmsAccessControl::className(), 'rules' => [['allow' => true, 'matchCallback' => function ($rule, $action) { return $this->isOwner; }]]]]; }