--- loncom/auth/lonacc.pm	2007/04/11 21:36:58	1.108
+++ loncom/auth/lonacc.pm	2007/04/26 18:31:53	1.109
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Cookie Based Access Handler
 #
-# $Id: lonacc.pm,v 1.108 2007/04/11 21:36:58 raeburn Exp $
+# $Id: lonacc.pm,v 1.109 2007/04/26 18:31:53 banghart Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -287,6 +287,14 @@ sub handler {
 		$env{'user.domain'};
 	    if ($requrl !~ /^\Q$start\E/) {
 		$env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
+		return HTTP_NOT_ACCEPTABLE;
+	    }
+	}
+	if ($requrl =~ m|^/zipspool/|) {
+	    my $start='/zipspool/zipout/'.$env{'user.name'}.
+		$env{'user.domain'};
+	    if ($requrl !~ /^\Q$start\E/) {
+		$env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
 		return HTTP_NOT_ACCEPTABLE;
 	    }
 	}