details url is permitted to anonymous users too