/** * Specifies the access control rules. * This method is used by the 'accessControl' filter. * @return array access control rules */ public function accessRules() { return array_merge(parent::accessRules(), array(array('allow', 'actions' => array('captcha'), 'users' => array('*')))); }