Wowza 4.6.0.2 live streaming RTSP playback issue

I have a live stream application, in the “Source Security”, I select “Client Restrictions” and put the encoder’s IP address there, and put the SDP file in the content folder.

In the “Playback Security”, there are no restriction at all.

When I use flash player to play the live stream, the flash player plays the live stream.

When I use VLC to do RTSP playback on the same stream, the VLC cannot play.

But if I remove the “Client Restrictions” (No client restrictions) from “Source Security”, then VLC also play the live stream.

I guess, in the Wowza Engine 4.6.0.2, when it authenticates RTSP player, it mistakenly uses SouceIPWhiteList, not PlaybackIPWhiteList to do the authentication which cause above issue.