Sometimes you may want to allow public access to certain controller actions. For example, if you are writing a REST api.

To do this, simply define protected $publicActions = [ 'yourAction' ]; in your controller. If, for example, you wanted to allow access for public users to create records and you are using a form controller behaviour, you might use protected $publicActions=['create', 'create_onSave'];