getUser()->isAdmin()) { throw new Forbidden(); } return parent::actionList($params, $data, $request); } public function postActionGetAttachmentFromImageUrl($params, $data) { if (empty($data->url)) throw new BadRequest(); return $this->getRecordService()->getAttachmentFromImageUrl($data->url)->getValueMap(); } public function postActionGetCopiedAttachment($params, $data) { if (empty($data->id)) throw new BadRequest(); return $this->getRecordService()->getCopiedAttachment($data->id)->getValueMap(); } }