allow anonymous read-only access. give yarong access to all the things