[mapserver-users] MapServer securing .map files

[tigana.fluens at gmail.com]

What are the best practices when relating application data to MapServer 
data? If I have a database of users, and each user owns a specific map, 
what is the best way (also secure of course) of calling those maps (I'm 
assuming the .map files are the ones needed) that a specific user is 
related to? Given that:

- Tom has map of his real estate
- Mark has map of his farm
- Web app is a PHP app that uses OpenLayers as an interface to call 
MapServer

How do I manage restrictions, i.e. security?