I think just adding a recordset to check if it is maintenance mode and then redirecting to the maintenance page would be enough. Don't really need security assist, but I suppose you could set a session variable from the value and do more complex rules with security assist if it was necessary, like letting through admin.