From 81d19314f91b758916a9598c1e50aa3992b8b78e Mon Sep 17 00:00:00 2001
From: Mike Rumph SetEnvIf
directives
are not separately evaluated in the subrequest due to the API phases
- mod_setenvif
.
When the server looks up a path via an internal subrequest,
- such as looking for a DirectoryIndex
or generating a directory listing with
- mod_autoindex
, per-request environment variables are
- not inherited in the subrequest. Additionally, environment
- SetEnvIf
directives
- are not separately evaluated in the subrequest due to the API phases
mod_setenvif
takes action in.
The all
provider mimics the functionality the
+
The all
provider mimics the functionality that
was previously provided by the 'Allow from all' and 'Deny from all'
directives. This provider can take one of two arguments which are
'granted' or 'denied'. The following examples will grant or deny
@@ -174,7 +165,7 @@
The method
provider allows to use the HTTP method in
+
The method
provider allows using the HTTP method in
authorization decisions. The GET and HEAD methods are treated as
equivalent. The TRACE method is not available to this provider,
use TraceEnable
instead.
The expr
provider allows to base authorization
+
The expr
provider allows basing authorization
decisions on arbitrary expressions.
Require expr %{TIME_HOUR} -ge 9 && %{TIME_HOUR} -le 17@@ -225,7 +216,7 @@ through the
Require
directive
in the same way as a base authorization provider. Besides the ability to
create and alias an extended provider, it also allows the same extended
- authorization provider to be reference by multiple locations.
+ authorization provider to be referenced by multiple locations.
When authorization is enabled, it is normally inherited by each
subsequent configuration section,
- unless a different set of authorization directives are specified.
+ unless a different set of authorization directives is specified.
This is the default action, which corresponds to an explicit setting
of AuthMerging Off
.
However, there may be circumstances in which is it desirable +
However, there may be circumstances in which it is desirable
for a configuration section's authorization to be combined with
that of its predecessor while configuration sections are being
merged. Two options are available for this case, And
diff --git a/docs/manual/mod/mod_authz_core.xml b/docs/manual/mod/mod_authz_core.xml
index 1425f0d42f..94a1e4d043 100644
--- a/docs/manual/mod/mod_authz_core.xml
+++ b/docs/manual/mod/mod_authz_core.xml
@@ -125,23 +125,13 @@ SetEnvIf User-Agent ^KnockKnock/2\.0 let_me_in
subrequest. Additionally,
When the server looks up a path via an internal subrequest,
- such as looking for a
The all
provider mimics the functionality the
+
The The The The The all
provider mimics the functionality that
was previously provided by the 'Allow from all' and 'Deny from all'
directives. This provider can take one of two arguments which are
'granted' or 'denied'. The following examples will grant or deny
@@ -159,7 +149,7 @@ SetEnvIf User-Agent ^KnockKnock/2\.0 let_me_in
method
provider allows to use the HTTP method in
+ method
provider allows using the HTTP method in
authorization decisions. The GET and HEAD methods are treated as
equivalent. The TRACE method is not available to this provider,
use expr
provider allows to base authorization
+ expr
provider allows basing authorization
decisions on arbitrary expressions.
When authorization is enabled, it is normally inherited by each
subsequent configuration section,
- unless a different set of authorization directives are specified.
+ unless a different set of authorization directives is specified.
This is the default action, which corresponds to an explicit setting
of AuthMerging Off
.
However, there may be circumstances in which is it desirable +
However, there may be circumstances in which it is desirable
for a configuration section's authorization to be combined with
that of its predecessor while configuration sections are being
merged. Two options are available for this case, And
--
2.50.1