testing yii users and rights