/**
* Specifies the access control rules.
* This method is used by the 'accessControl' filter.
* @return array access control rules
*/
public function accessRules()
{
return array(
array('allow',... ),
),
array('deny', // deny all users
'users'=>array('*'),
),
);
}
You should modify this permission array in order to allow not authenticated user to perform the action ‘registration’ and ‘password recovery’