denying directory accesses