You are viewing a plain text version of this content. The canonical link for it is here.

Posted to docs@httpd.apache.org by bu...@apache.org on 2026/05/01 20:16:46 UTC

[Bug 65145] ambiguities in mod/mod_authz_core.html

https://bz.apache.org/bugzilla/show_bug.cgi?id=65145

Rich Bowen <rb...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #1 from Rich Bowen <rb...@apache.org> ---
Added a new "Authorization Result States" section to mod_authz_core
documenting the tri-state authorization model:

- Providers return one of: Granted, Denied, or Neutral
- Table showing how RequireAll, RequireAny, and RequireNone each
  interpret the three results
- How negation (Require not) inverts granted↔denied but leaves
  neutral unchanged

Added seealso cross-references from:
- Require, RequireAll, RequireAny, RequireNone directives
- howto/auth.xml (authorization containers section)
- mod_authz_host, mod_authz_user, mod_authz_groupfile

The AuthzProviderAlias example issue (point 4) was previously fixed
in r1933649/r1933650 (Bug 66375).

Patched in r1933687 (trunk), r1933688 (2.4).

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org