I fixed this for my companies page with a general ACL check for editing rights - I think that this, combined with a config option will be ok. If no rights are given, I tell the user (see http://www.inetsoftware.de/lib/exe/mediamanager.php) . The switch for displaying the page or the message could be done in the core, so the templaters won't have to care.
I like the 403 idea too. Gerry. -- DokuWiki mailing list - more info at http://wiki.splitbrain.org/wiki:mailinglist