authz question

i have a repository i use to track all my source code, some of which i
want to make publicly available, but most of which i want to keep
private. i'm using mod_dav_svn and mod_svn_authz for repository access
and control, and have followed the pattern at svnbook.red-bean.com for
anonymous or authenticated access, with an authz file like this:

----
[/]
dcrosta = rw
[/trunk]
* = r
[/trunk/module]
* = r
[/trunk/othermod]
* =
[/trunk/thirdmod]
* =
----
which, if i understand correctly, should allow anonymous access to
/trunk/module, but not to any other part of the repository, and allow
me access to any of the repository. however, this is not working.
checkout and export are prompting for a password, but the list command
quite happily lists contents of /trunk/module. have i messed something
up?
alternately, is there an easier way to give access to just a portion
of the repository? i tried leaving out the section for [/trunk] and
for [/trunk/othermod] and [/trunk/thirdmod] ... that configuration
doesn't allow anonymous users to list /trunk (fine by me), it does
allow anonymous to list /trunk/module (good), but still won't allow
anonymous to check out from anywhere.
- d
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org