Hello,
1. DirectAdmin is unable to monitor directories like that, so if you password-protect a directory and then delete it, the protection will still appear in the list until you remove it.
2. Not sure why you would be getting a Code 500 on that, looking at the error log may help explain the problem.
Mark