[Zope] allowing only certain domains for certain objects/directories?

[A.J. Rossini]

What is the right approach for allowing only certain domains anonymous
access to certain subdirectories?  A user folder in the folder
directory with anonymous being domain-restricted?

I've got an Apache/Zope proxy-pass set up, but am not sure if it
would be "better" to block at Apache or at the Zope level (to be
honest, I'd prefer at the Zope level, for ease of remote management,
but...). 

Any thoughts appreciated!

best,
-tony

-- 
A.J. Rossini				Rsrch. Asst. Prof. of Biostatistics
UW Biostat/Center for AIDS Research	rossini@u.washington.edu	
FHCRC/SCHARP/HIV Vaccine Trials Net	rossini@scharp.org
-------- (friday is unknown) --------
FHCRC: M--W : 206-667-7025 (fax=4812)|Voicemail is pretty sketchy
CFAR:  ??   : 206-731-3647 (fax=3694)|Email is far better than phone
UW:    Th   : 206-543-1044 (fax=3286)|Change last 4 digits of phone to FAX