if that's what you want, then you have to DISABLE "list protected..." and set the permission for the valid account.
if the lock icon is in the HFS window, that's normal.
if it's in the browser, then it means you are not logged in with the valid account.