more granular access control so that we can show record pages to anonymous users