plesk-stat is not password-protected

[AzizE]

Hello.

I'm having an issue with password-protecting my plesk-stat folder. I enabled password protection via Service Plans > Hosting Parameters, but the folder isn't password protected. It's viewable by everyone. Is it related to permissions? or specific apache modules that need to be loaded? I disabled a few modules to keep my httpd lightweight.

I've also noticed that there aren't any auth directives in the httpd.include that plesk creates, or an htaccess file in the aliased /statistics/ folder to enable basic authentication to /httpdocs/plesk-stat/

I even tried disabling statistics, but the plesk-stat folder is still accessible with all the logs viewable to the public.

Any help would be greatly appreciated. Thanks.