So I created a role called `PublicRead` with the global permissions of Overall/Read and View/Read

Then I added an Item Role for it with Job/Read, Job/Workspace, and View/Read 

I then assigned it to the anonymous group in Global Roles and Item Roles

However, when trying to view the items, I get a forbidden response. 

I see that my Item Role Pattern is matching correctly

If I assign Job/Read on the global roles, it does work, but then anonymous can see everything.