1 <?xml version="1.0" encoding="ISO-8859-1"?>
2 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
4 <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
6 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
7 This file is generated from xml source: DO NOT EDIT
8 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
10 <title>mod_authz_owner - Apache HTTP Server Version 2.5</title>
11 <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
12 <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
13 <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
14 <script src="../style/scripts/prettify.min.js" type="text/javascript">
17 <link href="../images/favicon.ico" rel="shortcut icon" /></head>
19 <div id="page-header">
20 <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
21 <p class="apache">Apache HTTP Server Version 2.5</p>
22 <img alt="" src="../images/feather.png" /></div>
23 <div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div>
25 <a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP Server</a> > <a href="http://httpd.apache.org/docs/">Documentation</a> > <a href="../">Version 2.5</a> > <a href="./">Modules</a></div>
26 <div id="page-content">
27 <div id="preamble"><h1>Apache Module mod_authz_owner</h1>
29 <p><span>Available Languages: </span><a href="../en/mod/mod_authz_owner.html" title="English"> en </a> |
30 <a href="../fr/mod/mod_authz_owner.html" hreflang="fr" rel="alternate" title="Français"> fr </a> |
31 <a href="../ja/mod/mod_authz_owner.html" hreflang="ja" rel="alternate" title="Japanese"> ja </a> |
32 <a href="../ko/mod/mod_authz_owner.html" hreflang="ko" rel="alternate" title="Korean"> ko </a></p>
34 <table class="module"><tr><th><a href="module-dict.html#Description">Description:</a></th><td>Authorization based on file ownership</td></tr>
35 <tr><th><a href="module-dict.html#Status">Status:</a></th><td>Extension</td></tr>
36 <tr><th><a href="module-dict.html#ModuleIdentifier">Module Identifier:</a></th><td>authz_owner_module</td></tr>
37 <tr><th><a href="module-dict.html#SourceFile">Source File:</a></th><td>mod_authz_owner.c</td></tr></table>
40 <p>This module authorizes access to files by comparing the userid used
41 for HTTP authentication (the web userid) with the file-system owner or
42 group of the requested file. The supplied username and password
43 must be already properly verified by an authentication module,
44 such as <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> or
45 <code class="module"><a href="../mod/mod_auth_digest.html">mod_auth_digest</a></code>. <code class="module"><a href="../mod/mod_authz_owner.html">mod_authz_owner</a></code>
46 recognizes two arguments for the <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code> directive, <code>file-owner</code> and
47 <code>file-group</code>, as follows:</p>
50 <dt><code>file-owner</code></dt>
51 <dd>The supplied web-username must match the system's name for the
52 owner of the file being requested. That is, if the operating system
53 says the requested file is owned by <code>jones</code>, then the
54 username used to access it through the web must be <code>jones</code>
57 <dt><code>file-group</code></dt>
58 <dd>The name of the system group that owns the file must be present
59 in a group database, which is provided, for example, by <code class="module"><a href="../mod/mod_authz_groupfile.html">mod_authz_groupfile</a></code> or <code class="module"><a href="../mod/mod_authz_dbm.html">mod_authz_dbm</a></code>,
60 and the web-username must be a member of that group. For example, if
61 the operating system says the requested file is owned by (system)
62 group <code>accounts</code>, the group <code>accounts</code> must
63 appear in the group database and the web-username used in the request
64 must be a member of that group.</dd>
67 <div class="note"><h3>Note</h3>
68 <p>If <code class="module"><a href="../mod/mod_authz_owner.html">mod_authz_owner</a></code> is used in order to authorize
69 a resource that is not actually present in the filesystem
70 (<em>i.e.</em> a virtual resource), it will deny the access.</p>
72 <p>Particularly it will never authorize <a href="../content-negotiation.html#multiviews">content negotiated
73 "MultiViews"</a> resources.</p>
76 <div id="quickview"><h3>Topics</h3>
78 <li><img alt="" src="../images/down.gif" /> <a href="#examples">Configuration Examples</a></li>
79 </ul><h3 class="directives">Directives</h3>
80 <p>This module provides no
82 <h3>Bugfix checklist</h3><ul class="seealso"><li><a href="https://www.apache.org/dist/httpd/CHANGES_2.4">httpd changelog</a></li><li><a href="https://bz.apache.org/bugzilla/buglist.cgi?bug_status=__open__&list_id=144532&product=Apache%20httpd-2&query_format=specific&order=changeddate%20DESC%2Cpriority%2Cbug_severity&component=mod_authz_owner">Known issues</a></li><li><a href="https://bz.apache.org/bugzilla/enter_bug.cgi?product=Apache%20httpd-2&component=mod_authz_owner">Report a bug</a></li></ul><h3>See also</h3>
84 <li><code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code></li>
85 <li><a href="#comments_section">Comments</a></li></ul></div>
86 <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
88 <h2><a name="examples" id="examples">Configuration Examples</a><a title="Permanent link" href="#examples" class="permalink">¶</a></h2>
90 <h3><a name="examples.file-owner" id="examples.file-owner">Require file-owner</a></h3>
91 <p>Consider a multi-user system running the Apache Web server, with
92 each user having his or her own files in <code>~/public_html/private</code>. Assuming that there is a single
93 <code class="directive"><a href="../mod/mod_authn_dbm.html#authdbmuserfile">AuthDBMUserFile</a></code> database
94 that lists all of their web-usernames, and that these usernames match
95 the system's usernames that actually own the files on the server, then
96 the following stanza would allow only the user himself access to his
97 own files. User <code>jones</code> would not be allowed to access
98 files in <code>/home/smith/public_html/private</code> unless they
99 were owned by <code>jones</code> instead of <code>smith</code>.</p>
101 <pre class="prettyprint lang-config"><Directory "/home/*/public_html/private">
103 AuthName "MyPrivateFiles"
104 AuthBasicProvider dbm
105 AuthDBMUserFile "/usr/local/apache2/etc/.htdbm-all"
107 </Directory></pre>
111 <h3><a name="examples.file-group" id="examples.file-group">Require file-group</a></h3>
112 <p>Consider a system similar to the one described above, but with
113 some users that share their project files in
114 <code>~/public_html/project-foo</code>. The files are owned by the
115 system group <code>foo</code> and there is a single <code class="directive"><a href="../mod/mod_authz_dbm.html#authdbmgroupfile">AuthDBMGroupFile</a></code> database that
116 contains all of the web-usernames and their group membership,
117 <em>i.e.</em> they must be at least member of a group named
118 <code>foo</code>. So if <code>jones</code> and <code>smith</code>
119 are both member of the group <code>foo</code>, then both will be
120 authorized to access the <code>project-foo</code> directories of
123 <pre class="prettyprint lang-config"><Directory "/home/*/public_html/project-foo">
125 AuthName "Project Foo Files"
126 AuthBasicProvider dbm
128 # combined user/group database
129 AuthDBMUserFile "/usr/local/apache2/etc/.htdbm-all"
130 AuthDBMGroupFile "/usr/local/apache2/etc/.htdbm-all"
134 </Directory></pre>
139 <div class="bottomlang">
140 <p><span>Available Languages: </span><a href="../en/mod/mod_authz_owner.html" title="English"> en </a> |
141 <a href="../fr/mod/mod_authz_owner.html" hreflang="fr" rel="alternate" title="Français"> fr </a> |
142 <a href="../ja/mod/mod_authz_owner.html" hreflang="ja" rel="alternate" title="Japanese"> ja </a> |
143 <a href="../ko/mod/mod_authz_owner.html" hreflang="ko" rel="alternate" title="Korean"> ko </a></p>
144 </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
145 <script type="text/javascript"><!--//--><![CDATA[//><!--
146 var comments_shortname = 'httpd';
147 var comments_identifier = 'http://httpd.apache.org/docs/trunk/mod/mod_authz_owner.html';
149 if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
150 d.write('<div id="comments_thread"><\/div>');
151 var s = d.createElement('script');
152 s.type = 'text/javascript';
154 s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
155 (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
158 d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
160 })(window, document);
161 //--><!]]></script></div><div id="footer">
162 <p class="apache">Copyright 2018 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
163 <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
164 if (typeof(prettyPrint) !== 'undefined') {