Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.
My session expired during TTM exec, I noticed it because the API started to claim for basic auth.
Worst, after page reload I got this page: