title: How do I blend the functions of isAuthorized and Auth->allow/deny into one method in CakePHP?
body: <p>In my design, an action has a rank, 0-10 required to access it (0 being a guest [not logged in], 10 being an admin).  Each user has a rank, 0-10.  If you have the rank or higher, you can access the action, otherwise you can't.  Nice and simple, it's all I need.</p>
  
  <p>The problem is that CakePHP wants me to treat actions with two separate concepts.  I have to mark them Auth->allow/deny to determine if the auth system even bothers with them, and then I control access to them with isAuthorized().</p>
  
  <p>isAuthorized works great for my needs... except that any action I want to have access of rank 0 to has to be Auth->allow()... which then ignores my isAuthorized method completely.  If I deny all the pages, the login triggers on the pages that should be rank 0, before it checks isAuthorized, so even if I grant authorization through it, the person has to log in first.</p>
  
  <p>Is there any way to merge the two systems together, or a simple way to replace it?  Most of the auth system is great, and takes care of business for me without me having to mess with it... but this is just awkward and is going to cause problems when I don't notice a mixed up allow/deny or something.</p>
  
  <p>Thanks!</p>