pub const ANON: &str = "@anon";Expand description
The reader who presented no credential.
Granting this principal read on a repository is what makes that
repository public: the node stops refusing an unauthenticated
browse or fetch of it and evaluates the ACL under this name instead,
so one table answers “may this caller read this” for strangers and
account holders alike rather than a second rule existing beside it.
It cannot be authenticated as. Account names are ASCII alphanumerics
with -, _ and ., so the leading @ is unspellable in the one
place a name is chosen – the same property that makes @node
unforgeable as a repository name. Nothing here relies on a check
somewhere else refusing to issue it.
What it may hold is deliberately narrow, and enforced in
Acl::parse rather than at the point of use: never @node, never
*, and never a level above Level::Read. A grant that would let
a stranger write is not refused later, it does not parse.