[support] access denied page

Hi all. This is what I'm trying to achieve. - If the user is not logged in and they try to access a private page, they are taken to the login page. - If the user is logged in and they try to access a page they can't access, they are taken to an "access denied" page. The first seems easy enough. I just changed the "Default 403 page" to user/login. But, I can't figure out the second. Any ideas?