>>>>> "Geoffrey" == Geoffrey Young <[EMAIL PROTECTED]> writes:
Geoffrey> if I understand the problem correctly (which I may not) I Geoffrey> think both those phases are probably wrong and a more Geoffrey> generic phase is probably best, like the PerlInitHandler. Actually, now that I think about it a bit more, the question is "can this specific person access this resource? If not [first visit, for example], do something else" So it's really an Authz question. And it should be handled by an internal redirect if the authz fails. You want it *after* trans, access, and auth, so that you can determine resource, host-based permission, and identify the individual. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training! -- Report problems: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/modperl.html List etiquette: http://perl.apache.org/maillist/email-etiquette.html