How to disable anonymous browsing in Siebel REST API?

This is one of the most funny bug registered by Oracle. (Just after the obscene ROW IDs) .
Although this is applicable only for IP15, but do keep this in mind in case you are doing POCs on any customer.

Oracle left partially built config in the Java container sub system thus all the traffic coming through the system is passthrough. Kudos to the product team to get the feature out of the door :)

To disable this all you need to do is to delete the JavaContainerPropSub in named subsystems. This will cause authentication error in the component thus it won't turn on and you can in turn switch off the anonymous browsing.