[webapi] Record directories can be accessed