Hello. Frank Gingras wrote on 2023/04/11 13:36: > The legacy authz directives from 2.2 will indeed cause issues when mixed > with Require (2.4). Do not mix them. Yes. Basically, they MUST NOT BE MIXED, but we should know how they behave when the mod_access_compat is loaded. I think it was like this :) +--- mod_authz_core --+ +--- mod_access_compat --+ | | | | (entry) | granted | | Allow | -------------------------+----------------------------------+-----------------> 200 | | | | | | | denied | | | Deny | | +--------- | ---------+ +----------- | ----------+ | | v v 403 403 Is that correct? :) If Order directive is not written, it defaults to Order Deny,Allow. When Order is Deny,Allow, all are allowed by default, so mod_access_compat is passed by... ...I guess that's what it means. Regards. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx