Authless access to data.xml