[webizen]

for static file access, it is up to web server default running user. If the user is not in the account user's group, world readable permission is required.