Here's the situation. 1) A user hits a URL requiring them to be logged in, like /folder_contents. 2) They login, but they don't have permission to call the method in question. 3) So, they are presented the lovely Basic Authentication window. How do I skip step 3, and just give them an Unauthorized message. I don't want them to have to login twice! Jeff