The userlist is an explicit list of users from the userfile that are allowed access from this directive. You can use one or both of these parameters to further refine the list of authorized users from your userfile. The userlist parameter can also be replaced by the userpat parameter, and then be used to specify a list of users in the .nsconfig file. RestrictAccess applies access control to the directory and restricts certain users. More than one RestrictAccess can appear in the file.
Type determines whether the rule allows or denies access.
If the only RestrictAccess directives in a Files set are of type allow, then all hosts not specified by the patterns are denied. If no method is specified, the default is all methods. The last matching RestrictAccess directive applies. This means that ones with more general matching criteria will usually precede ones with more specific matching criteria. First allowing everyone and then denying specific users follows this pattern.