accessRules()method within the Controller class

public function accessRules()
        {
                return array(
                        array('allow', // allow all users to perform 'index' and 'view' actions
                                'controllers'=>array('issue','project','user'),
                                'actions'=>array('index', 'view', 'addUser'),
                                'users'=>array('@'),
                        ),
                        array('allow', // allow authenticated user to perform 'create' and 'update' actions
                                'controllers'=>array('issue','project','user'),
                                'actions'=>array('create','update'),
                                'users'=>array('@'),
                        ),
                        array('allow', // allow admin user to perform 'admin' and 'delete' actions
                                'controllers'=>array('issue','project','user'),
                                'actions'=>array('admin','delete'),
                                'users'=>array('admin'),
                        ),
                        array('deny', // deny all users
                                'controllers'=>array('issue','project','user'),
                                'users'=>array('*'),
                        ),
                );
        }