enable 'public read only'