added privilege access handler to storage system

docs/gotcha.txt

@@ -56,13 +56,29 @@ save you many hours of grief.
 
  * The default path for WebGUI backups is now /tmp/backups rather than
 	/data/backups
- 
+
+ * You may add optional protection for your uploaded WebGUI files. This
+	will check the privileges of the files from the WebGUI database
+	before sending them to the browser. To enable this you must use
+	these directives:
+
+	SetPerlVar WebguiRoot /data/WebGUI
+	PerlRequire /data/WebGUI/sbin/uploadAccessHandler.perl
+
+	And then add this to each virtual host you wish to protect:
+
+	PerlSetEnv WebguiConfig www.example.com.conf
+	<Location /uploads>
+		PerlAccessHandler WebGUI::UploadsAccessHandler
+	</Location>
+
  * In order to use the CDG Commerce iTransact payment plugin you'll have to 
 	make sure that the following modules are installed:
 		- XML::Simple
 		- LWP::UserAgent
 		- HTTP::Cookies
 
+
 6.2.8
 --------------------------------------------------------------------
  * Due to a bug in the theme system, if you created any themes in any