[MKDoc-dev] No authentication on www.*?

[Bruno Postle]

> If I'm right then I'll need to make sure that documents assigned
> to groups can only be accessed via users.* and then only by users
> in the right group.  Does that make sense?

Yes, the way we manage this with 1.6 currently is with apache 
redirects.  For example say we want only /news/stuff/ to be seen by 
logged-in users, we create a redirect the www.example.com 
virtualhost like so:

   Redirect /news/stuff/  http://users.example.com/news/stuff/

This forces authentication.  If we then wanted to restrict access 
even further, then we would have something like this in the 
users.example.com virtualhost:

  <Location /news/stuff/>
    ...
    Require group powerusers
  </Location>

-- 
Bruno