SU - refactor generic file access to use DIRECTORY permissions.