Hi all I am about to lock down a client Koha site so that users *MUST* be logged in to access any page. In Koha/2.2.9 this was straightforward: vi `grep -rl "authnotrequired => 1" /usr/local/koha/` and change each "authnotrequired => 1" to "authnotrequired => 0" It appears that things are not to simple in K3. There appears to be error handling and other scripts where this flag must remain as "authnotrequired => 1", e.g. 400.pl, abort.pl. I am in the process of writing a simple shell script to make this change globally to an installed instance of K3, but would like to avoid changing this flag where it should be left alone. Can anyone come up with a list of the perl scripts in the two cgi-bin directories where this flag MUST remain set to one? thanks rickw -- ________________________________________________________________ Rick Welykochy || Praxis Services || Internet Driving Instructor When the power of love overcomes the love of power, the world will know peace. -- Jimi Hendrix