add restricted as a property of DataFile
add restricted as a property of DataFile; cleaned up availableRoles logic
cleaned up availableRoles logic