deny access system and whole application dir