In most cases, the controller/module will be the resource i think... the action is the privilege, which you can allow or deny to your roles.

So, example:
/blog/article/edit
-> blog = module
-> article = controller
-> edit = action

And then you may have a resource like blog_article and an privilege called "edit".. got it? :P