whitelist accessible files