Yii User Extension


I am using yii-user and right extensions.

I cannot deny access to view list of access.

i am using

return array(

 array('allow',  // allow only admin and user roles to perform 'index' and 'view' actions




  array('deny',  // deny all users




but when i go to myapp/index.php/user without login i can see the list of user.

what i am doing wrong?

thx in advance