--- loncom/auth/lonacc.pm	2005/07/05 21:30:14	1.66
+++ loncom/auth/lonacc.pm	2005/07/07 05:53:35	1.67
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Cookie Based Access Handler
 #
-# $Id: lonacc.pm,v 1.66 2005/07/05 21:30:14 albertel Exp $
+# $Id: lonacc.pm,v 1.67 2005/07/07 05:53:35 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -92,6 +92,14 @@ sub handler {
 		    return HTTP_NOT_ACCEPTABLE;
 		}
 	    }
+	    if ($env{'user.name'} eq 'public' && 
+		$env{'user.domain'} eq 'public' &&
+		$requrl !~ m{^/+(res|public)/} &&
+		$requrl !~ m{^/+adm/(roles|logout|randomlabel\.png)}) {
+		$env{'request.querystring'}=$r->args;
+		$env{'request.firsturl'}=$requrl;
+		return FORBIDDEN;
+	    }
 # ------------------------------------------------------------- This is allowed
           if ($env{'request.course.id'}) {
 	    &Apache::lonnet::countacc($requrl);