You have a replicating agent with the correct ACL rights. However, when you try to replicate with this agent, you see the following in your replication logs:

13.06.2007 12:34:36 *INFO * author: << Date: Wed, 13 Jun 2007 10:34:36 GMT 13.06.2007 12:34:36 *INFO * author: << error: java.security.AccessControlException: User 'anonymous' not allowed rights '---c-' on handle /content/playground/en 13.06.2007 12:34:36 *INFO * author: Message sent. 13.06.2007 12:34:36 *INFO * author: ---------------------------

Solution

Deny read access of /system/replication/content for anonymous user in your target instance.

Additional information

AEM always tries to execute a request with the anonymous user before requesting authentication. Therefore, if the anonymous user has read rights on /system/replication/content, no authentication is done and the delivery agent user is ignored.