When I have problem with my .htaccess or test new things,
I usually go step by step, gathering information, and it helps me.
If I were you, I would see the error_log entries for the
"right click" requests because they could be the key for solving your problem.
You can use FTP, WebFTP, or script like this to see your error_log.
#!/bin/sh
# This shellscript will show you last 30 entries of error_log
# Upload this in ascii mode to a password protected directory
# as "te.cgi" or anything with ".cgi" , and set permission to 700.
# You can modify LNUM value if you prefer to see more (or less)
# (If you change, don't put any space between '=' and the number.)
LNUM=30
echo "Content-Type: text/html
<HTML><BODY bgcolor=#f0e0c8><PRE>"
echo "---- error_log ---- last $LNUM lines ----"
# Change "U/Username"...
tail "-$LNUM" /www/U/USERNAME/logs/error_log
# You can remove following uptime and ps command if you prefer.
echo "---- uptime -----"
/usr/bin/uptime
echo "---- ps -----"
/bin/ps -uxww
echo "---- done ----"
After gathering a little more info, I would comment out
most of RewriteCond to find out, exactly what is causing problem.
(Assuming that Rewrite rule is causing it....)
I'm not sure at all about this, but maybe Referer info is
not sent by browser when we "right click".
This can be checked by commenting out (or removing)
the first RewriteCondition of yours.
( RewriteCond %{HTTP_REFERER} !^$ )
If it was the case, then you have another problem....
Because it means you cann't forbid someone without
correct referer info if you want to have "right click to work".
Other than that, it all depends of the entries in error_log.
It cuold be the port number attached after the hostname
like http://yourdomain.com:80/xxx/yyy/zzz.
Some browser and proxy may do that, and if you get
Referer with port number, you will get 403.
(Because your conditions ask for very specific match,
anything slightly diferent will cause 403.)
Anyway, I think the "key" is in the error_log.
And when you see it, you may find what to correct by yourself,
or show it here, and it should be easier for people to assist you .
Good luck.
PS.[edit]
As error_log does not give Referer, URL requested,
you may want to see corresponding entries in access_log, as well.
If you don't have really a lot of visitors, this should be enough.
(Call this script as soon as you test "right click" thing...)
#!/bin/sh
# This shellscript will show you last 30 entries of error_log
# and last 100 entries from access_log.
# Upload this in ascii mode to a password protected directory
# as "tea.cgi" or anything with ".cgi" , and set permission to 700.
# You can modify LNUM value if you prefer to see more (or less)
# (If you change, don't put any space between '=' and the number.)
# For error_log
LNUM=30
# For access_log
LNUMA=100
echo "Content-Type: text/html
<HTML><BODY bgcolor=#f0e0c8><PRE>"
# Change "U/Username"...
# (Do not put '/' at the end.)
MPATH=/www/U/USERNAME
echo "---- error_log ---- last $LNUM lines ----"
tail "-$LNUM" "$MPATH/logs/error_log"
echo "---- access_log ---- last $LNUMA lines ----"
tail "-$LNUMA" "$MPATH/logs/access_log"
# You can remove following uptime and ps command if you prefer.
echo "---- uptime -----"
/usr/bin/uptime
echo "---- ps -----"
/bin/ps -uxww
echo "---- done ----"