Dynamic control of access rights in YII2