has *read* access