enable controlled folder access