selective authz does not work with apache module

I'm trying to selectively allow access to parts of a svn tree exposed
through apache. The authz file looks like this:

[groups]
externalgroups = @one, @two, WichertA

[/]
* = rw

[/projects/Workbench/IPE3-Gaius]
@externalgroups =
@ipe = rw
* = r

If I try to access /projects/Workbench/IPE3-Gaius using the WichertA account
I expect to be denied access, but the *=r line allows me access. If I
add a "WichertA=" line access is denied, but only for the first attempt:
any further attemps succeed.

The documentation suggests that the first matching entry in the authz
group will be used, which is not happening here. I see this both with
subversion 1.5.3 and 1.4.2.

Wichert.

-- 
Wichert Akkerman <wichert_at_wiggy.net>    It is simple to make things.
http://www.wiggy.net/                   It is hard to make things simple.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org