Once protection has been setup, you can control which users have access to it using the Edit Users page. When you click on a user or create a new one, the Allow access to web directories field can be used to select one or more allow paths from the list you define here.