class PostController extends CController
{
......
public function accessRules()
{
'actions'=>array('create', 'edit'),
'users'=>array('?'),
),
'actions'=>array('delete'),
'roles'=>array('admin'),
),
'actions'=>array('delete'),
'users'=>array('*'),
),
);
}
}