I feel I'm given explicit authorisation to read the page when the server sends a "200 OK" response to my request to read it.