# Password protection for subtree

**URL:** <https://www.ruby-forum.com/t/password-protection-for-subtree/105972>\
**Category:** Radiant CMS\
**Created:** [June 5, 2007, 4:23am UTC](https://www.ruby-forum.com/t/password-protection-for-subtree/105972 "2007-06-05T04:23:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![earl](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/ea666f/32.png) [@earl](https://www.ruby-forum.com/u/earl)\
**Post date:** [June 5, 2007, 4:23am UTC](https://www.ruby-forum.com/t/password-protection-for-subtree/105972/1 "2007-06-05T04:23:37Z")

</div>

I see two recent threads in this regard:

[http://lists.radiantcms.org/pipermail/radiant/2007-January/002879.html](http://lists.radiantcms.org/pipermail/radiant/2007-January/002879.html)  
[http://lists.radiantcms.org/pipermail/radiant/2007-May/004880.html](http://lists.radiantcms.org/pipermail/radiant/2007-May/004880.html)

The recommendation in the first thread is to use Apache .htaccess. What  
I cannot  
understand, and what wasn’t resolved, is that .htaccess resides in a  
filesystem, whereas  
the pages served up by Radiant are virtual.

Am I mistaken?

What I’d like to do is to have the main page being public, and a subtree  
of  
the site being password protected.

I suppose a compromise would be to have the password protected site  
being  
a separate tree altogether ☹

Hmm… I suppose this might be possible with:

[http://dev.radiantcms.org/radiant/wiki/HowToHostMultipleWebsites](http://dev.radiantcms.org/radiant/wiki/HowToHostMultipleWebsites)

Using this and Apache mod\_proxy, it might be simpler to have:

Site Root  
|

- [radiantpoweredpublicsite.com](http://radiantpoweredpublicsite.com)  
|
- [radiantpoweredpasswordsite.com](http://radiantpoweredpasswordsite.com)

And maybe somehow convince Apache to password protect the 2nd site.

Earl

---

<div class="post-metadata">

**Author:** ![earl](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/ea666f/32.png) [@earl](https://www.ruby-forum.com/u/earl)\
**Post date:** [June 5, 2007, 4:29am UTC](https://www.ruby-forum.com/t/password-protection-for-subtree/105972/2 "2007-06-05T04:29:37Z")

</div>

> [http://lists.radiantcms.org/pipermail/radiant/2007-January/002879.html](http://lists.radiantcms.org/pipermail/radiant/2007-January/002879.html)  
> [http://lists.radiantcms.org/pipermail/radiant/2007-May/004880.html](http://lists.radiantcms.org/pipermail/radiant/2007-May/004880.html)
> 
> The recommendation in the first thread is to use Apache  
> .htaccess. What  
> I cannot  
> understand, and what wasn’t resolved, is that .htaccess resides in a  
> filesystem, whereas  
> the pages served up by Radiant are virtual.

The part you’re missing is apache’s and   
options.

\<Location /monkeys\>  
Deny from all  
\</Location

should prevent access to your monkeys.

Dan.