Apache HTTP Server Version 2.1

Apache > HTTP Server > Documentation > Version 2.1 > Modules

# Apache Module mod_authz_user

Available Languages: en | ko

Description: | User Authorization
Status: | Base
Module Identifier: | authz_user_module
Source File: | mod_authz_user.c
Compatibility: | Available in Apache 2.1 and later

### Summary

This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site. `mod_authz_user` grants access if the authenticated user is listed in a `Require user` directive. Alternatively `require valid-user` can be used to grant access to all successfully authenticated users.

### Directives

### See also

- `Require`
- `Satisfy`

## AuthzUserAuthoritative Directive

Description: | Sets whether authorization will be passed on to lower level modules
Syntax: | `AuthzUserAuthoritative On|Off`
Default: | `AuthzUserAuthoritative On`
Context: | directory, .htaccess
Override: | AuthConfig
Status: | Base
Module: | mod_authz_user

Setting the `AuthzUserAuthoritative` directive explicitly to `Off` allows for user authorization to be passed on to lower level modules (as defined in the `modules.c` files) if there is no user matching the supplied userID.

By default, control is not passed on and an unknown user will result in an Authentication Required reply. Not setting it to `Off` thus keeps the system secure and forces an NCSA compliant behaviour.

Available Languages: en | ko