Update DenyAnonymousAuthorizationRequirement doc comment

[davhdavh]

DenyAnonymousAuthorizationRequirement: Actual behaviour is different than class name

• You've read the Contributor Guide and Code of Conduct.
• You've included inline docs for your change, where applicable.

Description

Actual behavior of DenyAnonymousAuthorizationRequirement is different than class name implies.

Addresses #4656

[ghost]

Thanks for your PR, @davhdavh. Someone from the team will get assigned to your PR shortly and we'll get it reviewed.

[blowdart]

I'm confused

Unlike what the name of the class implies, where you would expect failure if not authenticated, it instead succeeds if you are authenticated.

So, what happens if you are unauthenticated?

[davhdavh]

That gets handled further up in the chain, but this particular class does not set the Fail condition

[ghost]

Looks like this PR hasn't been active for some time and the codebase could have been changed in the meantime.
To make sure no conflicting changes have occurred, please rerun validation before merging. You can do this by leaving an /azp run comment here (requires commit rights), or by simply closing and reopening.