On Sat, 2008-03-22 at 15:38 -0700, Ric wrote: > > Checking.. yes, the cache directive is evaluated before the request is > > forwarded, which means that any acl that depends on the response will > > always be false there. > Any way to fix that? Fixable, but coding required. > Or do you have another suggestion? Fix your website to work with the HTTP cache model? Involves the simple rule that an url is either public or authenticated. To solve things like navigation menus, edit buttons etc on public content draw them using javascript instead of delivering them in the main public html blob, reducing your public/private scope to just the javascript include (or none if basing the include path on cookies). Regards Henrik