In my local/config.php I have the following lines:<br><br>## Keep non-editors from doing most actions<br>$HandleAuth['diff'] = 'edit';<br>$HandleAuth['source'] = 'edit';<br>$HandleAuth['phpinfo'] = 'edit';<br>$HandleAuth['diag'] = 'edit';<br>$HandleAuth['ruleset'] = 'edit';<br><br>Only the diff and source actions seem to be affected, that is, I can still do the phpinfo, diag, and ruleset actions even though not "logged in". Attempting diff and source actions gives me a login page as expected.<br><br>I would like to have the diagnostic tools available, but only to editors. Is there another way to do this... or can $HandleAuth be extended to the diagnostic actions?<br><br>BTW, I'm currently running 2.1.15.<br><br>Thanks,<br>Tony<br><br><BR><BR>~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~<br>Whenever a theory appears to you as the only possible one,<br>take this as a sign that you have neither understood the theory<br>nor the problem which it was intended to
solve. -- Karl Popper<br>~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~<br>HOME PAGE: www.awcfamily.com<br><br>I have no control over anything that appears after this sentence.<p> 
<hr size=1>Get your own <a href=" http://us.rd.yahoo.com/evt=43290/*http://smallbusiness.yahoo.com/domains"
>web address for just $1.99/1st yr</a>. We'll help. <a href="http://us.rd.yahoo.com/evt=41244/*http://smallbusiness.yahoo.com/"
>Yahoo! Small Business</a>.