added AccessControl to ManageController

Author: Igor Chepurnoy

controllers/DefaultController.php

@@ -70,7 +70,7 @@ public function behaviors()
         return [
             'access' => [
                 'class' => AccessControl::class,
-                'only' => ['quick-edit'],
+                'only' => ['quick-edit', 'delete'],
                 'rules' => [
                     [
                         'allow' => true,

controllers/ManageController.php

@@ -3,6 +3,7 @@
 namespace yii2mod\comments\controllers;
 
 use Yii;
+use yii\filters\AccessControl;
 use yii\filters\VerbFilter;
 use yii\web\Controller;
 use yii\web\NotFoundHttpException;
@@ -47,6 +48,15 @@ public function behaviors()
                     'delete' => ['post'],
                 ],
             ],
+            'access' => [
+                'class' => AccessControl::class,
+                'rules' => [
+                    [
+                        'allow' => true,
+                        'roles' => ['admin'],
+                    ],
+                ],
+            ],
         ];
     }