--- Revision 396437386130
+++ Revision 633033643332
@@ -50,7 +50,7 @@
 work flow : 
 
 for /db resources, including system dbs, use the db _security object
-for all other resources (e.g. /_uuids), use the ini configuration
+for all other resources (e.g. /_uuids), or when there is no _security object, use the ini configuration
 is the 'origins' section empty or non-existant ?
 yes -> is admin party set ? 
   yes -> return "*" , credentials false (with a good caching policy)