url-access to be configurable