diff --git a/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java b/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java
index 18ff1dbb21bd9dd88e7a0ed2ecdc266af7973c1a..2b8271f2d281c68dbfe57164b9d2f335268fd628 100644
--- a/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java
+++ b/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java
@@ -57,6 +57,7 @@ import ch.unige.solidify.SolidifyConstants;
 import ch.unige.solidify.rest.ActionName;
 import ch.unige.solidify.rest.RestCollection;
 import ch.unige.solidify.security.AdminPermissions;
+import ch.unige.solidify.security.EveryonePermissions;
 import ch.unige.solidify.security.NoOnePermissions;
 import ch.unige.solidify.security.UserPermissions;
 import ch.unige.solidify.util.StringTool;
@@ -201,7 +202,7 @@ public class OrganizationalUnitController extends DLCMResourceWithLogoController
     return super.uploadLogo(id, file);
   }
 
-  @UserPermissions
+  @EveryonePermissions
   @GetMapping(SolidifyConstants.URL_ID_PLUS_SEP + DLCMActionName.DOWNLOAD_LOGO)
   @ResponseBody
   @Override
diff --git a/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java b/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java
index b28433ba9cd677bd41ca7bb33ef5d66ee56e2b1b..27156043bc55e968e8ad37845f74172c324d00ec 100644
--- a/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java
+++ b/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java
@@ -71,6 +71,7 @@ public class DLCMConstants {
           "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.PUBLIC_METADATA + "/**",
           "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.ORG_UNIT + "/**",
           "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.PUBLIC_METADATA + "/search",
+          "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.ORG_UNIT + "/*/" + DLCMActionName.DOWNLOAD_LOGO,
           "/**/" + UrlPath.ACCESS_AIP + "/**/" + ActionName.DOWNLOAD_TOKEN,
           "/**/" + UrlPath.ACCESS_DIP + "/**/" + ActionName.DOWNLOAD_TOKEN,
           "/**/" + UrlPath.ACCESS_ORDER + "/**/" + ActionName.DOWNLOAD_TOKEN,