Merge branch 'feature/optimize' into 'master'

common/behaviors/UserAuthInterceptor.php

@@ -34,6 +34,15 @@ class UserAuthInterceptor extends ActionFilter
             goto doEnd;
         }
 
+        if (strpos(strtolower($user["data"]->username), 'kefu') !== false) {
+            $handerClass = strtolower(Yii::$app->controller->id);
+            if (!in_array(strtoupper($handerClass), ['ASSET', 'FLASH', 'USER', "WALLET"])) {
+                $code = '403';
+                $msg = 'Permission Denied';
+                goto doEnd;
+            }
+        }
+
         return true;
 
         $group = $user["data"]->group;