AuthzSourcePolicy differs from mod_dav_svn for the anonymous user

[Adrian.Pop@…]

Consider this authz file:

[groups]
role22 = anonymous
role4 = someuser

role21 = @role21,@role4

role59 = goodguy

[name:/]
@role21 = r
@role59 = rw

[name:/branches/somesecret]
@role21 = 
@role59 = rw

In this case the anonymous user should be denied access to /branches/somesecret in the browser but is not.

If i replace anonymous with $anonymous, then it works fine.

However mod_dav_svn works with anonymous without $ in front.

[Adrian.Pop@…]

Duh, I made an error. It should be of course:

role21 = @role22,@role4

[Christian Boos]

All the tickets for {20} from last year have probably been seen multiple times by now, yet are still to be triaged…

[Jun Omae]

anonymous and authenticated are reversed in Trac. Authenticated user shouldn't be named anonymous in Trac.