Thanks Maxim for your continuous support and patience, you are a god send. :)

I did not put the root in the server because the password file is outside the /public directory, it's one level up, in the private.

I want to only protect all the content inside documents, so i think is correct as you pointed out.

So, basically, my config file does what i want to acomplish, but still getting a 403. Perhaps a permission issue? But i have the same owner and group for files and dirs that are working ok.