AuthZ file rules not being respected

Hello all

I have a single-repository multiple-project setup. In it, a subpath on
my SVN repos should be readable/writeable only by a few users (on
group council), while the rest of the repository catches a wider
audience (group users). However, users from the group users can read
council-only files through both file:// and http:// URIs.

Again, seeking a bit of your experience.

Here's my setup (on Ubuntu Server 64bit 8.04):
Apache:
<Location /svn>
  DAV svn
  SVNPath /my/svn
  SVNListParentPath Off

  AuthzSVNAccessFile /some/dir/authz_svn.access

  Require valid-user

  AuthType Basic
  AuthUserFile /some/dir/dav_svn.passwd
  AuthName "Boreste"
</Location>

/some/dir/autzh_svn.access:
[groups]
council = c1, c2
users = u1, u2, u3, c1, c2

[/]
* =
@users = rw

[/council]
* =
@users =
@council = rw

The directory /my/svn is owned, readable and writable by Apache, and
readable by users.

-- 
Carlos Vieira
+55(48)3025.4222
.:: Boreste ::. Sistemas Embarcados -- Do Conceito à Inovação
www.boreste.com