allow http user to write and read