[squid-users] About proxy_auth alc

Hi,

I've a question about proxy_auth acl.

if I've an acl list like the following

acl friends proxy_auth mary jane carl
acl target dst 10.0.0.1

http_access friends allow
http_access target deny

What happens when mary contacts 10.0.0.1? always allow?

If "http_access friends allow" is evaluated to true, is the second also
checked?

I mean, the proxy_auth acl is considered by squid like the others acl, or is
evaluated only the first time and when the timeout expires?

Is there some doc explaining the state-chart of the entire
authentication scheme?

Thanks in advance
Regards
Alberto