validates public access on direct url entry