From: Donald B Guy
-If you make a directory listable and readable by system:anyuser then it can be viewed by any user on the web via the UTLs mentioned above +If you make a directory listable and readable by system:anyuser then it can be viewed by any user on the web via the URLs mentioned above
Unfortunately, adding specific users to an AFS ACL does not mean they can see the folder when they access it from the web. IS&T, however, does provide a solution to this. First, make sure that the wanted directory is not readable by system:anyuser. Create a file named .htaccess.mit in that directory. In that file you can do one of three things,