Setting up client-only access in a collection