Will fix this with 1.0.3-1 (1.0.3 from upstream is due shortly). Correct solution is to allow from /usr/share/mahara/lib/pieforms/static/ only, which preserves the deny status of the other files in lib that should have it.
-- Regards, Nigel McNie Catalyst IT Ltd. DDI: +64 4 803 2203 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]