Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Message-ID: <41FE52A0.9010905@travelstart.se>
Date: Mon, 31 Jan 2005 16:45:36 +0100
From: Andreas Andersson <andreas@travelstart.se>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] authication best practice

Hi!

I've been doing authentication with htaccess for some years but now I 
have to "design" a somewhat more complex system and thought I should ask 
for your help before trying to re-invent the wheel.

I have a testserver to which I must restrict users in different groups. 
Some groups should have access to all parts of the testserver while some 
other groups only should have access to "their" parts. Like this.

/                  (access only to the group "internal")
/site_one          (access only to the group "internal" or "site_one")
/site_two          (access only to the group "internal" or "site_two")
/all_other_sites   (access only to the group "internal")

I would like to write a rule saying "restrict to internal group but also 
allow groups found in .htaccess in that directory".

-- 
Andreas Andersson
IT Dept.
Travelstart Nordic
andreas@travelstart.se
http://www.travelstart.se

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org