curl: access notes without permission