w3.org

Change History of W3C httpd

Protection directive defines a protection setup and associates a name with it:
	Protection  prot-name  {
		AuthType    Basic
		ServerId    Test-Server
		PasswdFile  /where/ever/passwd
		GroupFile   /where/ever/group
		UserId      someuser
		GroupId     somegroup
		GET-Mask    list, of, users, and, groups
		POST-Mask   list, of, users, and, groups
		PUT-Mask    list, of, users, and, groups
	}
The content between the curly braces is the same as used to go the the protection setup file. What's new is the possibility to specify the UserId and GroupId for the clild process when serving the request in protected mode. This is not possible with external files for security reasons [it is not possible inside the external file, but it is not possible if the ids are set when calling that file; see doc for more details].