Fixes issue #124.

framework/web/AccessRule.php

@@ -9,9 +9,6 @@ namespace yii\web;
 
 use yii\base\Component;
 use yii\base\Action;
-use yii\base\Controller;
-use yii\web\User;
-use yii\web\Request;
 
 /**
  *

framework/web/User.php

@@ -461,7 +461,7 @@ class User extends Component
 		if ($auth !== null) {
 			return $auth->checkAccess($this->getId(), $operation, $params);
 		} else {
-			return true;
+			return false;
 		}
 	}
 }