authorisation fixes
maxdepth 10 for drag tree explicitly set on init call