allow user to get /file