Allow read only for public. Require auth for upload/delete etc.
Allow read only for public.
Require auth for upload/delete etc.