PURGE on private items

[hvelarde]

I was inspecting the logs of one server when I stumbled with some requests returning status code 401:

127.0.0.1 - Anonymous [25/Jan/2017:16:22:24 -0200] "PURGE /VirtualHostBase/http/www.example.com:80/Plone/VirtualHostRoot/lorem-ipsum/ HTTP/1.1" 401 87240 "" ""
127.0.0.1 - Anonymous [25/Jan/2017:16:22:26 -0200] "PURGE /VirtualHostBase/http/www.example.com:80/Plone/VirtualHostRoot/lorem-ipsum/view HTTP/1.1" 401 87753 "" ""
127.0.0.1 - Anonymous [25/Jan/2017:16:22:30 -0200] "PURGE /VirtualHostBase/http/www.example.com:80/Plone/VirtualHostRoot/lorem-ipsum HTTP/1.1" 401 87237 "" ""

the lorem-ipsum object is in Private state.

is this behavior expected?

[cleberjsantos]

@hvelarde For me it makes sense, private objects in practice must be authenticated on the portal to see them, if you are authenticated you should not cache.