Hi, what would be the better way to restrict access to 3rd party cgi scripts? Would subclassing twcgi.CGIScript to add HTTP authentication (to render()?) and then use this as porcessor for '.cgi' (or other invented extension for protected cgis) be a good way to go? thanks, mario