Page Comparison

...

• <htaccess>
  • Enables Apache .htaccess support during the authorization phase, even if other uses of .htaccess are not enabled. Specifically, this is automatic and implicit for the "Native" RequestMapper, but can also be enabled by hand when the "XML" RequestMapper is used. Note that this will fail for non-Apache servers.

• <AccessControlProvider>
  • Attaches a custom access control policy supported by a plugin.

• <AccessControl>
  • Attaches an access control policy using the sample XML-based plugin provided with the SP.
  <AccessControlProvider>
  • Attaches a custom access control policy supported by a pluginThis is just a short-hand for embedding the policy in the element above, if you want the policy inside the same file.

If no element is included (or inherited or implicitly enabled), any access control is left to the resource.

...