security of LimitExcept?

When I just did a commit, it doesn't ask for my password. I'm a bit afraid.

The initial checkout was via http://. Before putting my real repository on the
server, I tried checking out/in a dummy repository, and it asked for password.
But after swapping in my real server, it is not asking.

My apache2 conf lists:

<Location /repos>
  DAV svn
  SVNPath /home/svn/svn
  AuthType Basic
  AuthName "Subversion repository"
  AuthUserFile /etc/svn-auth-file
  <LimitExcept GET PROPFIND OPTIONS REPORT>
      Require valid-user
  </LimitExcept>
</Location>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Fri Apr 18 00:29:18 2003