auth all file access, not only this app