From what you're telling me I don't think you've got a good grasp on object oriented programming
Something to keep in mind: ACL is authorization, while auth is authentication. Authentication establishes who you are, while authorization establishes what you can do.
http://bakery.cakephp.org/articles/view ... akephp-aclthis does an excellant job of explaining ACL
and this explains Auth really well:
http://www.littlehart.net/atthekeyboard ... component/Basically, this is what goes down. You try to login, and the page references a database, and asks does the username match the password. if so, redirect to page X (ideally page X will be accessible to all user permission levels). then once you are logged in ( and the session says that you're logged in ( for example, if the session/cookie doesnt say so, then you wont stay logged in)) and you try to navigate to page Y, before the page is loaded, cakePHP checks against a databse( probably the same database) what your user permission level is, and then the code will specify if that permission level is able to view that page. if it is, the page loads.