>Can anyone either point out any major problems with this approach, or
> >alternatively (preferably), suggest a better alternative ?
> >In case it makes any difference to peoples ideas/views, I am not using
Apache
> >for access control.  Users authenticate against a database, then on each
page
> >they visit, their user level (taken from the session object) is checked
> >against the access level required for that page.
> >
> Since You already have the users level is the Session object, you can
> have an asp handle the downloads, like this:
> -  check if the user has the required level.
> -  set $Response->{ContentType} to whatever it is you want
> -  open the (out of the webroot) file and while reading it, output to
> the client.

---

Sorry for taking so long to reply, but I had email "issues".
Thanks for this suggestion - it sounds like it will probably be just what I
need.
I have one further question though.  Is there a list somewhere of all the
"ContentTypes".
Eg, if I am sending a word document, or a PDF, what is the content type ?

Thanks
Richard


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to