[FIX] security rule for file.doc model