I think I have a fix to avoid direct access to the addBib function.
in jommbib.php
....
case 'add':
if(! ($acl->acl_check('administration','edit','users',$my->usertype, 'components', 'all' ) | $acl->acl_check('administration','edit','users',$my->usertype, 'components', 'com_joombib' ))) {
mosRedirect( 'index2.php' , _NOT_AUTH );
}
addBib($sets,$catId);
break;
.....
A small search on the web shows that it's possible to edit bibliography whithout be registered...
