Yii2restful authenticator认证通过后，AccessControl还可 [ 2.0 版本 ]

他是继承 `
yii\rest\Controller;

public function behaviors()

{
    $behaviors = parent::behaviors();
    $behaviors['authenticator'] = [
        'class' => CompositeAuth::className(),
        'authMethods' => [
            HttpBasicAuth::className(),
            HttpBearerAuth::className(),
            QueryParamAuth::className(),
        ],
    ];
    $behaviors['access'] = [
        'class' => \yii\filters\AccessControl::className(),
        'only' => $this->actions,
        'except' => $this->except,
        'rules' => [
            [
                'allow' => false,
                'actions' => empty($this->mustlogin) ? [] : $this->mustlogin,
                'roles' => ['?'], // guest
            ],
            [
                'allow' => true,
                'actions' => empty($this->mustlogin) ? [] : $this->mustlogin,
                'roles' => ['@'],
            ],
        ],
    ];
    $behaviors['verbs']=[
        'class' => \yii\filters\VerbFilter::className(),
        'actions' => $this->verbs,
    ];
    return $behaviors;
}