rights config for directories