Default access and authenticated access

Some ideas: