Hi all.

This is what I'm trying to achieve.

- If the user is not logged in and they try to access a private page, they are taken to the login page.
- If the user is logged in and they try to access a page they can't access, they are taken to an "access denied" page.

The first seems easy enough. I just changed the "Default 403 page" to user/login.

But, I can't figure out the second.

Any ideas?