I recently changed the ACL of a database to make the entries for -default- and Anonymous “No access” instead of “Reader”. My expectation was that this would force logon. However, since then, users are opening the database from the browser and seeing two very old documents, and nothing else. They are not prompted for logon.