in reply to mod_perl handler for file downloads: good call or bad
Sounds more like you want an authorization handler (PerlAuthzHandler) which passes or forbids access.