Firstly use PHP 5. Secondly remove $this->Auth->allow('*'). Why are you even using the Auth component if your allowing all pages to be viewable? Perhaps place this in each controller separately.
And thirdly, I thought isAuthorized is called after you are logged in. Someone correct me if im wrong. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---