properly enforce user permission

+ Properly enforce user permissions for uploading files, moving files
(file_edit), deleting folders (file_del), adding folders (file_add) on
the controller/script level. Not only on the template/view level.