I have a virtual directory called FILES which contains all the .PDF files. Now, I want to allow the user to access these files only when he logins ies,<BR>if the user says http://domain-name/files/file1.pdf , he/she should not be able to download the file.<BR><BR>I have a login page and storing the userid in session. if the user successfully logins , then i want to list of the files ,so that he/she can download those files.<BR><BR>I removed the READ access on the virtual directory,so that user cannot see the files directly. if i am doing this, i am unable to do this even if he logins !!