* added restriction permission check in all descendants
* excluded restricted destination subfolders from available
	destination list
* added tests for admin/tools.py coverage