Re: mod_access/4602: Deny directive not denying access

[re...@raleigh.ibm.com]

[In order for any reply to be added to the PR database, you need]
[to include <ap...@Apache.Org> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or      ]
["Re: general/1098:").  If the subject doesn't match this       ]
[pattern, your message will be misfiled and ignored.  The       ]
["apbugs" address is not added to the Cc line of messages from  ]
[the database automatically because of the potential for mail   ]
[loops.  If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request from a  ]
[developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]


Synopsis: Deny directive not denying access

State-Changed-From-To: open-feedback
State-Changed-By: rederpj@raleigh.ibm.com
State-Changed-When: Wed Aug  4 12:51:34 PDT 1999
State-Changed-Why:
I have worked to verify this PR. The first quoted part (from
Brian) should work as specified (and in fact does work correctly
for me on version 1.3.7-dev). The second part (from Tammy, the
PR's submitter) should behave excactly as it does. 

Beacuse the Order is specified as "deny,allow" the allow clause
is processed last. The text in the Deny clause will do nothing
since the last thing evaluated is "Allow from All". To fix this
you should change the Order to "allow,deny".

So, in summary, Tammy should change the Order to "allow,deny"
and Brian should try again with a more recent version.

Please reply if these are fixed.
Severity-Changed-From-To: serious-non-critical
Severity-Changed-By: rederpj@raleigh.ibm.com
Severity-Changed-When: Wed Aug  4 12:51:34 PDT 1999