I have a web app where the administrator can create news, pdf documents and other stuff in his cms panel.
The problem is when the admin delete a new or something else th
Separate your document folder and web site folder. And give right permission your document folder.