do not allow to delete/modify files that do not belong to cms root folder