deny all access to storage folder