Well... I have played with perms on the "/" node a bit.
The obvious thing to try was to revoke the public read rights on the "/" node. I realised what a mistake that was *after* I clicked the "revoke" button. (I fixed my own mistake with the help of the forums.)
I don't see a combination of permissions that can be placed on the "/" node that will allow public access to a login page, but prevent the public from seeing the rest of the site.
(I apologise if I'm being dense. I'm still working up the learning curve on OpenACS, and really do appreciate the help.)
