restrict file permission to link only