* added acl check to file controller
* added changelog