[Exist-open] disable guest account in order to prevent anonymous access

[Michael P. <mic...@gm...>]

Dear all,

I want to prevent anonymous access to my eXist database altogether. So I
created a placeholder user, placed it in the guest group, and disabled the
guest account (using sm:set-account-enabled),
as suggested in the eXist book (p. 137).

Now sm:is-account-enabled('guest') returns false, but this has no effect on
anonymous access.

Any ideas why this doesn't work as expected? There are of course other ways
to prevent anonymous access, but this one would be very elegant.

(I'm running eXist 6.0.1 on Ubuntu Focal Fossa with OpenJDK.)

Michael