made sure web user is set as group for read access