no permit if docroot with '..'