restrict files on publish