no strict needed if everyone is allowed to access