Anonymous should still have some permissions