CORE-4000: use a higher-level directory as the stopping point for ensuring the user has access to folders and files that are moved