* Allow access to all parent directories of allowed paths.
* Handle `LOG_VIEW` in the same way as `BROWSER_VIEW` and `FILE_VIEW`.
* For undecided paths and changesets, leave the decision to following policies.
* Implemented the `$anonymous` and `$authenticated` special tokens.
Closes #9542 and #8289.
