  <Location /xyz>
    # either the "Allow from 192.168.1" or "Require valid-user" will be used
    Satisfy Any    
    Order allow,deny
    Allow from 192.168.1.0/24
    Allow from localhost
    Require valid-user

    AuthType Basic
    AuthName "Admin access"
    AuthUserFile /srv/web/blah/.htpasswd
  </Location>