Admin UI

The protection scope can now be set per folder — for cases like "keep just the logos in this folder public" or "protect ...