This is a very simple question. If I have to allow access to a component, how do I know, in general terms, where to add the exception? Should I do it in the WAF or allow direct access to the particular directory of the component in the .htaccess file?
So far, I've managed to find out that the .htaccess can avoid some troubles -such as getting blank pages- when an extension is given the correct permission to be accessed. And that the WAF stops warning about a 'supposedly' harmless component everytime it is used after I mark it as an exception.
As you can see, this is not a question about security, but about which correct decision is to be made without being desperately wandering through AdminTools functions.
Thank you, and sorry if the answer is out there. I couldn't find it.