如何在yii2中使用规则为某些角色组织正确的角色访问控制层次结构？

return [
    // ...
    'components' => [
        // ...
        'authManager' => [
            'class' => 'yii\rbac\DbManager',
        ],
    ],
];

yii rbac/init

use yii\rbac\Role;
use yii\rbac\Permission;

$authManager = Yii::$app->authManager;

// 创建角色
$adminRole = $authManager->createRole('admin');
$authManager->add($adminRole);

$editorRole = $authManager->createRole('editor');
$authManager->add($editorRole);

// 创建权限
$createPostPermission = $authManager->createPermission('createPost');
$authManager->add($createPostPermission);

$updatePostPermission = $authManager->createPermission('updatePost');
$authManager->add($updatePostPermission);

// 将权限分配给角色
$authManager->addChild($adminRole, $createPostPermission);
$authManager->addChild($adminRole, $updatePostPermission);

$authManager->addChild($editorRole, $updatePostPermission);

// 检查用户的角色和权限
$userRole = $authManager->getRole('admin');
$canCreatePost = $authManager->checkAccess($userId, 'createPost'); // 检查用户是否具有创建文章的权限
$canUpdatePost = $authManager->checkAccess($userId, 'updatePost'); // 检查用户是否具有更新文章的权限

use yii\base\Behavior;
use yii\web\Controller;
use yii\web\ForbiddenHttpException;

class AccessControlBehavior extends Behavior
{
    public $roles = [];

    public function events()
    {
        return [
            Controller::EVENT_BEFORE_ACTION => 'beforeAction',
        ];
    }

    public function beforeAction($event)
    {
        $user = Yii::$app->user;
        if (!$user->isGuest && !in_array($user->identity->role, $this->roles)) {
            throw new ForbiddenHttpException('You are not allowed to perform this action.');
        }
    }
}

use yii\web\Controller;

class SiteController extends Controller
{
    public function behaviors()
    {
        return [
            'access' => [
                'class' => AccessControlBehavior::class,
                'roles' => ['admin', 'editor'],
            ],
        ];
    }

    // ...
}