Synnefo

		// we need to check the read-all flag or the signature-in-parameters.

		if (authDeferred)

			if (file != null && !file.isReadForAll() && content) {

				// Check for GET with the signature in the request parameters.

				String auth = req.getParameter(AUTHORIZATION_PARAMETER);

				String dateParam = req.getParameter(DATE_PARAMETER);

		else if(folder != null && folder.isReadForAll() || file != null && file.isReadForAll()){

			//This case refers to a folder or file with public privileges

			//For a read-for-all folder request, pretend the owner is making it.

			user = owner;

			req.setAttribute(USER_ATTRIBUTE, user);

		}else if(folder != null && !folder.isReadForAll()){

			resp.sendError(HttpServletResponse.SC_FORBIDDEN);

			return;

		}

		else{

			resp.sendError(HttpServletResponse.SC_FORBIDDEN);

			return;

		}

    		if (accept != null && accept.contains("text/html")) {

    			contentType = "text/html;charset=UTF-8";

    			isContentHtml = true;

    			//this is the case when clients send the appropriate headers, the contentType is "text/html"

    			//and expect a JSON response. The above check applies to FireGSS client

    		}

    			contentType = "application/json;charset=UTF-8";

    			expectJSON = true;

    		}