design document for read-only access for anonymous users