in reply to OT: WebApp Authorization Question
Catalyst together with Catalyst::Plugin::Authorization::ACL is my preferred solution.
CountZero
"If you have four groups working on a compiler, you'll get a 4-pass compiler." - Conway's Law