When you try to manage a group in ucp.php?i=groups&mode=manage while the adm/ directory is protected with htaccess, you get a popup asking for the username and password.

I think the UCP should not require stuff from adm/
This means that the stuff (like colour swatch (currently adm/swatch)) should be moved to another directory.