[users@httpd] Can File directives override security set up by Directory directives??

[Paul Coldrey <pa...@ensigma.com.au>]

Hi Folks,

What I want to do is set the permissions of a directory to a restrictive 
level but have one file in that directory at a much less restrictive 
level. From a little testing it appears Apache doesn't allow this 
(which, from many perspectives is quite logical, and similar to a 
general file system :). However I think this feature may be quite 
useful.... I have a couple of spots where it would make life a lot 
easier and neater. Perhaps, if it isn't possible it warrants another 
directive or a modifier on the File/Directory directives.

Hence I'm wondering
1. can I do it with the current directives and, if so, how?
2. if not does anyone agree that this might be useful?
3. if we agree that it's useful:
-  does anyone want to add it?
-  does anyone have any hints/tips/gotchas that might give me a head 
start when adding it myself?

Cheers,

    Paul




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Can File directives override security set up by Directory directives??

[Rich Bowen <rb...@rcbowen.com>]

On Tue, 9 Sep 2003, Paul Coldrey wrote:

> 
> 
> Hi Folks,
> 
> What I want to do is set the permissions of a directory to a restrictive 
> level but have one file in that directory at a much less restrictive 
> level. From a little testing it appears Apache doesn't allow this 
> (which, from many perspectives is quite logical, and similar to a 
> general file system :). However I think this feature may be quite 
> useful.... I have a couple of spots where it would make life a lot 
> easier and neater. Perhaps, if it isn't possible it warrants another 
> directive or a modifier on the File/Directory directives.
> 
> Hence I'm wondering
> 1. can I do it with the current directives and, if so, how?

You probably can do what you want with the Satisfy directive.

You'd set restrictive conditions in <Directory> and then relax them with
"Satisfy Any" in the <Files> section.

> 2. if not does anyone agree that this might be useful?

Yes, it is very useful

> 3. if we agree that it's useful:
> -  does anyone want to add it?

See above.

> -  does anyone have any hints/tips/gotchas that might give me a head 
> start when adding it myself?

Read the docs for Satisfy first, and see if it does what you want.

-- 
Pilgrim, how you journey on the road you chose
To find out where the winds die and where the stories go
 --Pilgrim (Enya - A Day Without Rain)


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org