in reply to CGI accessing sensitive framework?

Not really a perl question, but... apache has all sorts of configuration for specific user authentication. If you use apache's authentication properly, I don't see why you can't allow access as the user you just authenticated. If you don't have permission to change the apache configuration, then that's another story

fnord