If you recently applied patch SUPEE-6285, and are having Access Denied issues, it is because the Mage team changed the way the way the method, isAllowed() checks for user permissions in Mage_Adminhtml_Controller_Action. I did not discover this, another fellow Magento programmer did and he was nice enough to share with us. I have patched all my custom modules and can verify that this information does in fact work. I just wanted to pass on the information. http://magento.stackexchange.com/questions/73646/access-denied-errors-after-installing-supee-6285
