deny access files when server status or attachments status is disabled