How to prevent a user from logging into the admin panel?

Question

Yii

Such a question, if I close the user's access to the admin panel like this in the Site controller

'access' => [
                'class' => AccessControl::className(),
                'rules' => [
                    [
                        'actions' => ['login', 'error'],
                        'allow' => true,
                    ],
                    [
                        'actions' => ['logout', 'index'],
                        'allow' => true,
                        'roles' => ['admin'],
                    ],
                ],
            ],

Or even like this in the main config for the entire backend

'as access' => [
        'class' => 'yii\filters\AccessControl',
        'except' => ['site/login', 'site/error'],
        'rules' => [
            [
                'allow' => true,
                'roles' => ['admin'],
            ],
        ],
    ],

Then any user can log in to the backend and see the main and menus of the admin panel, of course, he cannot do anything there and see more too. But I would like that if it's not the admin logged in, then throw an exception. How to do it?

Answer 1

In the controller that will check the authorization, immediately add a condition for checking the access level.
An example of a possible implementation on the first Yii

public function actionLogin()
    {
        if (!Yii::app()->user->isGuest)
        {
            $role = Yii::app()->user->role;
            if ($role)
            {
                $this->redirect(Yii::app()->params['modules_default_pages'][$role]);
            }
        }

        $model = new LoginForm;

        // if it is ajax validation request
        if (isset($_POST['ajax']) && $_POST['ajax'] === 'login-form')
        {
            echo CActiveForm::validate($model);
            Yii::app()->end();
        }

        // collect user input data
        if (isset($_POST['LoginForm']))
        {
            $model->attributes = $_POST['LoginForm'];

            if ($model->validate() && $model->login())
                    $this->redirect(Yii::app()->user->returnUrl);
        }

        $this->render('login', array('model' => $model));
    }

Answer 2

will see the main and menus of the admin panel,

only if you do not change the layout for the error page
you are looking for the problem in the wrong place. It is that you have 1 layout for both public pages and pages with limited access. Login and error should have a layout without menus, etc.