It's even in [the guide](http://www.yiiframework.com/doc-2.0/guide-security-authorization.html#rbac) <kbd>ctrl</kbd><kbd>+</kbd><kbd>f</kbd> `updateownpost`