protected function _isAllowed() {
        // check if a user may view this page
        $request = $this->getRequest();
        return Garp_Auth::getInstance()->isAllowed(
            $request->getControllerName(),
            $request->getActionName()
        );
    }