#8163 Possible to svn-checkout read-protected projects
Hi, it seems to be possible to checkout read-protected projects using svn and http.
It seems the json API at http://web:8080/auth/repo_permissions always returns allow_read->OK.
Checking in is blocked as it should, but not checkout.
You need to know or guess the checkout url for this, browsing to the project is not possible.
If I go to the code repository and change the permissions for that tool (instead of the whole project) to remove "read" "anonymous" permission, then it works. You're right that it isn't working as expected when anonymous read permission is removed at the project level.