restrict user access to some folders

Restrict user access to folders "data", "includes" and "users".