Yii User Extension

hi,
I am using yii-user and right extensions.
I cannot deny access to view list of access.
i am using

return array(
 array('allow',  // allow only admin and user roles to perform 'index' and 'view' actions
   'actions'=>array('index','view',),
   'users'=>array('admin'),
   ),
  array('deny',  // deny all users
   'users'=>array('*'),
  ),
);

but when i go to myapp/index.php/user without login i can see the list of user.
what i am doing wrong?
thx in advance