From http://stackoverflow.com/questions/19992747/rbac-in-yii-access-checking