Check authorization

daemon.py

@@ -9434,8 +9434,9 @@ class PubServer(BaseHTTPRequestHandler):
                                   'permitted directory',
                                   'login shown done')
 
-        if authorized and htmlGET and '/users/' in self.path and \
+        if htmlGET and '/users/' in self.path and \
            self.path.endswith('/newswiremobile'):
+            if (authorized or (not authorized and '/users/news/' in self.path)):
                 nickname = getNicknameFromActor(self.path)
                 if not nickname:
                     self._404()
@@ -9454,7 +9455,8 @@ class PubServer(BaseHTTPRequestHandler):
                                          self.server.positiveVoting,
                                          timelinePath,
                                          showPublishAsIcon).encode('utf-8')
-            self._set_headers('text/html', len(msg), cookie, callingDomain)
+                self._set_headers('text/html', len(msg),
+                                  cookie, callingDomain)
                 self._write(msg)
                 self.server.GETbusy = False
                 return