allow deny for common folder