create admin api to return read-only storage file list