Users w/o access to content should still have configurable access to the content URL