https://bz.apache.org/bugzilla/show_bug.cgi?id=59785
--- Comment #3 from Eric Covener <[email protected]> --- You'll need to find another way to phrase your require directives: 1) requireany is implicit: When multiple Require directives are used in a single configuration section and are not contained in another authorization directive like <RequireAll>, they are implicitly contained within a <RequireAny> directive. Thus the first one to authorize a user authorizes the entire request, and subsequent Require directives are ignored. 2) "not" has special limitations: The result of the Require directive may be negated through the use of the not option. As with the other negated authorization directive <RequireNone>, when the Require directive is negated it can only fail or return a neutral result, and therefore may never independently authorize a request. Maybe as simple as <requireall> require all granted require not ... require not .. </requireall> -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
