This was tracked in the book's issue tracker as issue #71. This commit
is based on the patch attached to that issue.
See this post and follow-ups for related discussion:
Date: Thu, 14 Jan 2010 22:16:35 +0000
From: Philip Martin <philip@...>
To: dev@...
Subject: Multiple matching lines in authz file
Message-ID: <877hrkmiws.fsf@...>
http://svn.haxx.se/dev/archive-2010-01/0340.shtml
I also discussed this with striker (who wrote a lot of the initial authz
code) at the Apache Retreat. He confirmed that this was a documentation bug,
rather than a bug in the implementation.
* src/en/book/ch06-server-configuration.xml:
(svn.serverconfig.pathbasedauthz): Group permissions can only be
extended, not restricted, for individual group members. Document
this correctly, rather than claiming the opposite was true.
Patch by: Mark Cammidge
(tweaked by me)