Hi,
that should be fairly easy with the existing tooling, because you just need to enforce authentication for that access. That means, that every user needs to be authenticated, on the authorization level you need just a simple group ("authenticated user"), where every user is member of.
And then ...