You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by David <am...@starhub.net.sg> on 2003/09/11 15:36:19 UTC

[users@httpd] Creating exclusive access for each individual password for the server

Hi guys,
 
We can create some basic authentication for our HTTP server. 
Previously, I was working on how to make certain pages secure. Some of
you guys suggested that I put all the "confidential" pages in one
folder. 
I will control the access to the folder using the .htaccess file ( to be
more precise, by setting some directives in the .htaccess file). 
This .htaccess will read the userID and the respective password sets
from another htpasswd file. 
 
The above method works if all the users of the basic authentication
server are meant to access the same set of files.
 
My problem now:
 
User 1 can only access webpage 1.
User 2 can only access webpage 2.
User 3 can only access webpage 3.
.
.
..
 
 
That is, the above method of dumping all the confidential pages in one
single folder will not work anymore ( since all other users now can view
all the confidential documents.) What I really want is to ONLY allow
each of the user 1, user 2 or user 3 to view their respective
confidential pages. User 1 cannot view user 2 pages.
User 2 cannot view user 3 pages. If I were to put all the pages to one
folder, everyone will be able to view everyone's pages.
 
How can I do this ?
 
Warmest Regards
David