mod_authz_user
User Authorization
Base
mod_authz_user.c
authz_user_module
Available in Apache 2.1 and later

This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site. mod_authz_user grants access if the authenticated user is listed in a `Require user` directive. Alternatively `require valid-user` can be used to grant access to all successfully authenticated users.

Require
Satisfy
AuthzUserAuthoritative
Sets whether authorization will be passed on to lower level modules
AuthzUserAuthoritative On|Off
AuthzUserAuthoritative On
directory
.htaccess
AuthConfig

Setting the AuthzUserAuthoritative directive explicitly to `Off` allows for user authorization to be passed on to lower level modules (as defined in the `modules.c` files) if there is no user matching the supplied userID.

By default, control is not passed on and an unknown user will result in an Authentication Required reply. Not setting it to `Off` thus keeps the system secure and forces an NCSA compliant behaviour.