# Consult the bookmark tutorial

**URL:** <https://discourse.cakephp.org/t/consult-the-bookmark-tutorial/2794>\
**Category:** Need Help\
**Created:** [June 28, 2017, 9:28am UTC](https://discourse.cakephp.org/t/consult-the-bookmark-tutorial/2794 "2017-06-28T09:28:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![carson](https://avatars.discourse-cdn.com/v4/letter/c/e9bcb4/32.png) [@carson](https://discourse.cakephp.org/u/carson)\
**Post date:** [June 28, 2017, 9:28am UTC](https://discourse.cakephp.org/t/consult-the-bookmark-tutorial/2794/1 "2017-06-28T09:28:18Z")

</div>

I was looking at the official bookmark tutorial for the user registration page (/ users/add).$this - \> Auth - \> allow ([’ logout ', ‘add’]);This statement is not accessible to UsersController and is directly skipped to the login page;If you add to the AppController, you can access the registration [page.Is](http://page.Is) this correct?Or did I write something wrong?

---

<div class="post-metadata">

**Author:** ![xaphalanx](https://yyz1.discourse-cdn.com/flex029/user_avatar/discourse.cakephp.org/xaphalanx/32/575_2.png) [@xaphalanx](https://discourse.cakephp.org/u/xaphalanx)\
**Post date:** [June 28, 2017, 1:26pm UTC](https://discourse.cakephp.org/t/consult-the-bookmark-tutorial/2794/2 "2017-06-28T13:26:30Z")

</div>

I’m not sure I understand your question. I’ll do my best to respond.

allow([…actions…]) is specific to the Controller that is executing. If you place it in the App controller it will apply to all actions named “add”. It’s best therefore to keep it in the currently executing controller.

If registration is in the add() method of your users controller, you want to add $this-\>Auth-\>allow([‘add’]) to the beforeFilter function of the users controller and that should allow unauthenticated users access.

Hope that helps.

---

<div class="post-metadata">

**Author:** ![carson](https://avatars.discourse-cdn.com/v4/letter/c/e9bcb4/32.png) [@carson](https://discourse.cakephp.org/u/carson)\
**Post date:** [July 6, 2017, 8:23am UTC](https://discourse.cakephp.org/t/consult-the-bookmark-tutorial/2794/3 "2017-07-06T08:23:04Z")

</div>

Thank you very much.

I found that I write wrong. Correct term $this-\>Auth-\>allow([‘logout’, ‘add’]); My writing is $this-\>Auth-\>allow(‘logout’, ‘add’)