[opencms-dev] 'Guests' group and 'Guest' user

[Jonathan Woods]

If I deactivate the Guests group and (just to be sure) the Guest user, and
even if I explicitly deny the Guest user 'read' and 'view' privileges on a
folder, I can still browse anonymously (without logging on) through the
whole online project and the folder I configured.  Can anyone tell me why
this is?
 
Better still, it would be great if there were any documentation out there
about the OpenCms security model - for example, whether it's 'deny then
allow' or the other way round.
 
Jon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20060308/fe09d07b/attachment.htm>