Cakephp ACL & Auth Sample can give you idea how to work.