allow_read, Mercurial 1.0.1, Debian

[Denis Ubozhenko]

Hi ML

I am trying to configure access for reading under hgwebdir.
But something was wrong, and anyone who got access through http-authentication, 
can read absolutely any repository.

For example, I have two user: deonis and mike.
If I am logged on as deonis, I can read both the repository.

hgwebdir.config:
[paths]
test = repo_test
test2 = repo_test2

hgrc for repo_test:
[web]
allow_push = deonis mike
allow_read = deonis mike
push_ssl = false
contact = Studio Psyho (info at psyho.ua)
description = Get our elephants
allow_archive = bz2 gz zip

hgrc for repo_test2:
[web]
allow_push = mike
allow_read = mike
push_ssl = false
contact = Studio Psyho (info at psyho.ua)
description = Get our elephants
allow_archive = bz2 gz zip

How can I fix it?

P.S. I can not installed a newer version of the Mercurial on this server :(

--
Best regards,

Denis Ubozhenko

Studio Psyho, http://www.psyho.ua
mobile: +380 (50) 481-30-33
phone:  +380 (56) 378-28-85
e-mail:  deonis at psyho.ua