public function accessRules() { return array_merge(array(array('allow', 'actions' => array('GenerateQRSignature'), 'roles' => array('OprnEditClericalCvi', 'admin'))), parent::accessRules()); }