AuthComponent Cake2 $this->Auth->allow('add', 'index'); Note the lack of array. Cake3 $this->Auth->allow(['add', 'index']); Note the array.