In the httpd.conf fragment below, I want jack and jane to have access to base, but only jack to have access to child. However, I find that jane has access to child How can i block this? Thanks for your help, Mike. btw: $ rpm -q httpd httpd-2.2.4-4.1.fc7 <Directory "/var/www/html/www/base"> Options -All SymLinksIfOwnerMatch ExecCGI AllowOverride None AuthType Basic AuthName Private AuthUserFile /var/www/passwd/.htpasswd Require user jack jane RewriteEngine on RewriteCond %{REQUEST_URI} ^.*/base/.*$ RewriteRule ^.*\.html.*(\?.*)?$ ./index.cgi$1 [L] RewriteCond %{REQUEST_URI} ^.*/base/.*$ RewriteRule ^/.*/$ ./index.cgi </Directory> <Directory "/var/www/html/www/base/child"> Options -All SymLinksIfOwnerMatch ExecCGI AllowOverride None AuthType Basic AuthName Private AuthUserFile /var/www/passwd/.htpasswd Require user jack RewriteEngine on RewriteCond %{REQUEST_URI} ^.*/base/.*$ RewriteRule ^.*\.html.*(\?.*)?$ ./index.cgi$1 [L] RewriteCond %{REQUEST_URI} ^.*/base/.*$ RewriteRule ^/.*/$ ./index.cgi </Directory> --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx