Add permission rules to FileViewerServlet