Add access control enabled flag to cms configuration.
Check access level before serving page or file.