public function accessRules()
        {
                return array(
                        array('allow',  // only acccessable by admins
                                //'users'=>array('*'),                                 'actions'=>array('admin','index','update', 'create', 'delete'),

                                'expression '=> '$user->isAdmin()',
                        ),