last fro this year : access protected - multistaging

I am deploying my app  with 2 virtual host for the testing and staging
phases under mongrel

1-  test.mydomain.net
2-  stage.mydomain.net
2-  www.mydomain.net

I would like to give access to test and stage only for authorized
users and www to everyone, using the Apache  basic authorization
system  I am using

I think I must write in my virtual host Apache conf

<Location 'directory'>
   AuthType Basic
    AuthName "Mydomain Repository"
    AuthUserFile /etc/apache2/mydomain.passwd
    <LimitExcept GET >
        Require valid-user
    </LimitExcept>
</Location>


but I dont' know which directory I should protect ?   current or
public..
can I write a recipe for that?

thanks and Happy New Year !!