richard, ser has permission module and it would take some work to add a parameter that would support checking of refer and 302. then in case permission check fails, there could be a new function that would rewrite 302 contact or refer-to. -- juha