add picklist for folders and users and fix access