<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2802" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=616272016-08032006><FONT face=Arial size=2>If I deactivate the
Guests group and (just to be sure) the Guest user, and even if I explicitly deny
the Guest user 'read' and 'view' privileges on a folder, I can still browse
anonymously (without logging on) through the whole online project and the folder
I configured. Can anyone tell me why this is?</FONT></SPAN></DIV>
<DIV><SPAN class=616272016-08032006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=616272016-08032006><FONT face=Arial size=2>Better still, it
would be great if there were any documentation out there about the OpenCms
security model - for example, whether it's 'deny then allow' or the other way
round.</FONT></SPAN></DIV>
<DIV><SPAN class=616272016-08032006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=616272016-08032006><FONT face=Arial
size=2>Jon</FONT></SPAN></DIV></BODY></HTML>