A method according to claim 7, wherein said client requests access to a web site via said request and further including the step of applying said access control rules to permit the client to perform operations at said web site only in accordance with said access control rules.