--- a/mercurial/hgweb/hgweb_mod.py	Sat Jan 03 20:33:37 2009 +0100
+++ b/mercurial/hgweb/hgweb_mod.py	Sat Jan 03 20:33:19 2009 +0100
@@ -165,8 +165,9 @@
             ctype = tmpl('mimetype', encoding=self.encoding)
             ctype = templater.stringify(ctype)
 
-            # check allow_read / deny_read config options
-            self.check_perm(req, None)
+            # check read permissions non-static content
+            if cmd != 'static':
+                self.check_perm(req, None)
 
             if cmd == '':
                 req.form['cmd'] = [tmpl.cache['default']]