My understanding is that it would have to be a ‘public’ directory in your example, so no need to log in.
