A "feed" served by a RSS url from addedvalues can now require authorisation. There are several layers of security. All RSS feds are in the url directory addedValuesPI/rss/ and may contain 1 or 2 further levels. The first level is mandatory and is the the name of a report whose usage is RSS. The second is optional and must be the name of a query.
If the url is one level and the discussion is open to be read by non members, there are no limits to the RSS feed. If the discussion group is closed, authorisation is required.
If the url is 2 level, authorisation is always required. If the requestor has a membership cookie for the website, a logon is implied; otherwise addedValues enters an HTTP authentication process, so the requestor must supply a valid memberKey and password for the website. Once membership is confirmed; if a 2 level url was used; the memberKey must be a member of any cohort associated with the query.