restrict access to files uploaded by ckeditor