## require

Syntax: require entity-name entity entity...
Context: directory, .htaccess
Override: AuthConfig
Status: core

This directive selects which authenticated users can access a directory. The allowed syntaxes are:

- require user userid userid ...

  Only the named users can access the directory.

- require group group-name group-name ...

  Only users in the named groups can access the directory.

- require valid-user

  All valid users can access the directory.

Require must be accompanied by AuthName and AuthType directives, and directives such as AuthUserFile and AuthGroupFile (to define users and groups) in order to work correctly. Example:

> `AuthType Basic
> AuthName "Restricted Directory"
> AuthUserFile /web/users
> AuthGroupFile /web/groups
> require group admin
> `

Access controls which are applied in this way are effective for all methods. This is what is normally desired. If you wish to apply access controls only to specific methods, while leaving other methods unprotected, then place the `require` statement into a <Limit> section