The thread "webapp security vs the private xmlrpc server" on the launchpad mailing list talks about how to implement this.
The thread "webapp security vs the private xmlrpc server" on the launchpad mailing list talks about how to implement this.