diff --git a/VERSION b/VERSION
index 348fc11..ea4bd0f 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.1.12
+2.1.13
diff --git a/hubmap-auth/src/app.py b/hubmap-auth/src/app.py
index c0cabeb..59d14d6 100644
--- a/hubmap-auth/src/app.py
+++ b/hubmap-auth/src/app.py
@@ -511,7 +511,7 @@ def create_request_headers_for_auth(token):
 # AVR file uuid is handled via uuid-api only and no token is required
 def get_file_access(uuid, token_from_query, request):
     # AVR and AVR files are standalone, not stored in neo4j and won't be available via entity-api
-    supported_entity_types = ['Donor', 'Sample', 'Dataset']
+    supported_entity_types = ['Donor', 'Sample', 'Dataset', 'Publication']
 
     # Returns one of the following codes
     allowed = 200