Authentication and Authorization
Once the request processor has located both the package_id and concrete file associated with the request, authentication is -performed by the session security system. After authentication has been +performed by the session security system. After authentication has been performed the user is authorized to have read access for the given package by the OpenACS 4 Permissions Design. If authorization succeeds then the request is served, otherwise it is