Implement GET w.o. auth for attachments related to public resources