svn commit: r433694 - in /httpd/httpd/trunk/docs: conf/extra/httpd-dav.conf.in manual/mod/mod_dav.xml

[sl...@apache.org]

Author: slive
Date: Tue Aug 22 10:07:54 2006
New Revision: 433694

URL: http://svn.apache.org/viewvc?rev=433694&view=rev
Log:
Allow the typical non-DAV methods to be unrestricted
in our DAV examples (in particular, POST).  Also
change <Location> to <Directory> in the docs.  This
particular example was not a security problem because
<Location> was being used to *extend* access, rather than
to *restrict* access, but it is better to encourage
people to use <Directory> by default.

PR: 40030

Modified:
    httpd/httpd/trunk/docs/conf/extra/httpd-dav.conf.in
    httpd/httpd/trunk/docs/manual/mod/mod_dav.xml

Modified: httpd/httpd/trunk/docs/conf/extra/httpd-dav.conf.in
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/conf/extra/httpd-dav.conf.in?rev=433694&r1=433693&r2=433694&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/conf/extra/httpd-dav.conf.in (original)
+++ httpd/httpd/trunk/docs/conf/extra/httpd-dav.conf.in Tue Aug 22 10:07:54 2006
@@ -28,7 +28,7 @@
 
     # Allow universal read-access, but writes are restricted
     # to the admin user.
-    <LimitExcept GET OPTIONS>
+    <LimitExcept GET POST OPTIONS>
         require user admin
     </LimitExcept>
 </Directory>

Modified: httpd/httpd/trunk/docs/manual/mod/mod_dav.xml
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_dav.xml?rev=433694&r1=433693&r2=433694&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_dav.xml (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_dav.xml Tue Aug 22 10:07:54 2006
@@ -79,7 +79,7 @@
     <example><title>Full Example</title>
       DavLockDB /usr/local/apache2/var/DavLock<br />
       <br />
-       &lt;Location /foo&gt;<br />
+       &lt;Directory /usr/local/apache2/htdocs/foo&gt;<br />
        <indent>
 	 Order Allow,Deny<br />
 	 Allow from all<br />
@@ -89,13 +89,13 @@
          AuthName DAV<br />
          AuthUserFile user.passwd<br />
          <br />
-         &lt;LimitExcept GET OPTIONS&gt;<br />
+         &lt;LimitExcept GET POST OPTIONS&gt;<br />
          <indent>
            require user admin<br />
          </indent>
          &lt;/LimitExcept&gt;<br />
        </indent>
-       &lt;/Location&gt;<br />
+       &lt;/Directory&gt;<br />
     </example>
 
    <p><module>mod_dav</module> is a descendent of Greg Stein's <a