Drupal has a edit own content permission for each content type.
I have given the Article: edit own content to anonymous users and discovered that Drupal doesn't differentiate between different anonymous users, which means that an anonymous user has the permission to edit all the Article nodes created by anonymous users.
It seems that a sessions isn't really created for users until they sign in. So there isn't a session to identify anonymous users. Even then, the code checks the user ID, which is 0 for all the anonymous users.
Is this a bug with the permission, or can it be resolved?
I have seen other modules attempt to differentiate between different anonymous users. I think there was a flag for anonymous users. Then there is a few session based modules, but I don't see how these can help.