Hello.

Frank Gingras wrote on 2023/04/11 13:36:
> The legacy authz directives from 2.2 will indeed cause issues when mixed
> with Require (2.4). Do not mix them.

Yes.
Basically, they MUST NOT BE MIXED, but  we should know how they behave when the 
mod_access_compat is loaded.
I think it was like this :)

              +--- mod_authz_core --+          +--- mod_access_compat --+
              |                     |          |                        |
(entry)       |             granted |          |                  Allow |
-------------------------+----------------------------------+-----------------> 
200
              |          |          |          |            |           |
              |   denied |          |          |       Deny |           |
              +--------- | ---------+          +----------- | ----------+
                         |                                  |
                         v                                  v
                        403                                403

Is that correct? :)
If Order directive is not written, it defaults to Order Deny,Allow.
When Order is Deny,Allow, all are allowed by default, so mod_access_compat is 
passed by...
...I guess that's what it means.

Regards.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to