I'm a little puzzled. As other mail (just sent) describes, I'm having some trouble getting PUT requests to work in some browsers; as far as I can tell, the current cause is that WebDAV is requesting credentials for the PUT, and the browser is not asking the user for the credentials.
However, when a PUT request fails for lack of credentials, or for wrong credentials, I would expect the request to return an HTTP 401. Instead, the BaseX log seems to show 200 requests, both for the initial request from the client without credentials, and for the second request, whether the second request was made with correct credentials (and succeeded) or with bad credentials (and failed).
Is the WebDAV service really returning a 200, or are the logs inaccurate?