https://bugs.koozali.org/show_bug.cgi?id=12343

            Bug ID: 12343
           Summary: authorization in Location section make Directory
                    section authorization ignored
    Classification: Contribs
           Product: SME Contribs
           Version: 10.0
          Hardware: ---
                OS: ---
            Status: CONFIRMED
          Severity: normal
          Priority: P3
         Component: smeserver-phpmyadmin
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
  Target Milestone: ---

looking at https://forums.koozali.org/index.php/topic,54975.0.html and reading
the template we can see:

- if using admin log : authentication is defined in Location section, then more
follow in Directory section. However according to his page, it would be ignored
:

https://httpd.apache.org/docs/2.4/mod/mod_authz_core.html
https://httpd.apache.org/docs/2.4/mod/mod_authz_core.html#authmerging


Security Warning
Exercise caution when setting authorization directives in Location sections
that overlap with content served out of the filesystem. By default, these
configuration sections overwrite authorization configuration in Directory, and
Files sections.

The AuthMerging directive can be used to control how authorization
configuration sections are merged.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
_______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/

Reply via email to