security of user file