This block is potentially granting anonymous users access to "interact" with resources (e.g., post comments, discussion items, etc...).  I think the `var canInteract = ...` above could be `false` if the current user is anonymous.