>>>>> "Geoffrey" == Geoffrey Young <[EMAIL PROTECTED]> writes:

Geoffrey> if I understand the problem correctly (which I may not) I
Geoffrey> think both those phases are probably wrong and a more
Geoffrey> generic phase is probably best, like the PerlInitHandler.

Actually, now that I think about it a bit more, the question is "can
this specific person access this resource?  If not [first visit, for
example], do something else"

So it's really an Authz question.  And it should be handled by an
internal redirect if the authz fails.  You want it *after* trans,
access, and auth, so that you can determine resource, host-based
permission, and identify the individual.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

-- 
Report problems: http://perl.apache.org/bugs/
Mail list info: http://perl.apache.org/maillist/modperl.html
List etiquette: http://perl.apache.org/maillist/email-etiquette.html

Reply via email to