user can download if no protetto