[18409] in Athena Bugs
subtle problem with .htaccess.mit groups
daemon@ATHENA.MIT.EDU (Bill Cattey)
Fri Oct 13 17:42:40 2000
Message-ID: <Ytts7AFz0001FT3oh6@mit.edu>
Date: Fri, 13 Oct 2000 21:42:36 +0000 ()
From: Bill Cattey <wdc@MIT.EDU>
To: bugs@MIT.EDU
Tom Coppeto and I worked through this, and we both agree
I've found a bug.
The htaccess web page http://web.mit.edu/cwis/web/htaccess-usage.shtml
gives the example:
<limit GET>
require group cwis
require group network cwis
</limit>
If a user is in group network but not in group cwis, access will be denied.
(Actually, the example is a little bit problematic, because there is
no justification for why you need cwis in two requires lines.)
In my situation, I wanted to grant access to multiple groups.
The .htaccess.mit file:
<limit GET>
require group dspace-read, dspace-write
</limit>
but
<limit GET>
require group dspace-read
require group dspace-write
</limit>
does not.
This is becase I am in dspace-write but not dspace-read.
The file
<limit GET>
require group dspace-write
require group dspace-read
</limit>
DOES work for me because I am in dspace-write.
-wdc
