The new 'allow anonymous review browsing' option is great, but it should be extended to have permissions per repository. Somehow the uploading of diff files would have to be placed into the correct repository too to get the right permissions.