diff --git a/app/Policies/ServerPolicy.php b/app/Policies/ServerPolicy.php
index 302ace0f..2615149f 100644
--- a/app/Policies/ServerPolicy.php
+++ b/app/Policies/ServerPolicy.php
@@ -209,6 +209,70 @@ class ServerPolicy
         return $user->permissions()->server($server)->permission('save-files')->exists();
     }
 
+    /**
+     * Check if user has permission to move and rename files and folders on a server.
+     *
+     * @param  Pterodactyl\Models\User   $user
+     * @param  Pterodactyl\Models\Server $server
+     * @return boolean
+     */
+    public function moveFiles(User $user, Server $server)
+    {
+        if ($this->isOwner($user, $server)) {
+            return true;
+        }
+
+        return $user->permissions()->server($server)->permission('move-files')->exists();
+    }
+
+    /**
+     * Check if user has permission to copy folders and files on a server.
+     *
+     * @param  Pterodactyl\Models\User   $user
+     * @param  Pterodactyl\Models\Server $server
+     * @return boolean
+     */
+    public function copyFiles(User $user, Server $server)
+    {
+        if ($this->isOwner($user, $server)) {
+            return true;
+        }
+
+        return $user->permissions()->server($server)->permission('copy-files')->exists();
+    }
+
+    /**
+     * Check if user has permission to compress files and folders on a server.
+     *
+     * @param  Pterodactyl\Models\User   $user
+     * @param  Pterodactyl\Models\Server $server
+     * @return boolean
+     */
+    public function compressFiles(User $user, Server $server)
+    {
+        if ($this->isOwner($user, $server)) {
+            return true;
+        }
+
+        return $user->permissions()->server($server)->permission('compress-files')->exists();
+    }
+
+    /**
+     * Check if user has permission to decompress files on a server.
+     *
+     * @param  Pterodactyl\Models\User   $user
+     * @param  Pterodactyl\Models\Server $server
+     * @return boolean
+     */
+    public function decompressFiles(User $user, Server $server)
+    {
+        if ($this->isOwner($user, $server)) {
+            return true;
+        }
+
+        return $user->permissions()->server($server)->permission('decompress-files')->exists();
+    }
+
     /**
      * Check if user has permission to add files to a server.
      *
diff --git a/app/Repositories/ServerRepository.php b/app/Repositories/ServerRepository.php
index 549941b7..394c057a 100644
--- a/app/Repositories/ServerRepository.php
+++ b/app/Repositories/ServerRepository.php
@@ -41,19 +41,7 @@ class ServerRepository
 {
 
     protected $daemonPermissions = [
-        's:get',
-        's:power:start',
-        's:power:stop',
-        's:power:restart',
-        's:power:kill',
-        's:console',
-        's:command',
-        's:files:get',
-        's:files:read',
-        's:files:post',
-        's:files:delete',
-        's:files:upload',
-        's:set-password'
+        's:*'
     ];
 
     public function __construct()
diff --git a/app/Repositories/SubuserRepository.php b/app/Repositories/SubuserRepository.php
index 38910e00..1e812a14 100644
--- a/app/Repositories/SubuserRepository.php
+++ b/app/Repositories/SubuserRepository.php
@@ -71,6 +71,10 @@ class SubuserRepository
         'download-files' => null,
         'upload-files' => 's:files:upload',
         'delete-files' => 's:files:delete',
+        'move-files' => 's:files:move',
+        'copy-files' => 's:files:copy',
+        'compress-files' => 's:files:compress',
+        'decompress-files' => 's:files:decompress',
 
         // Subusers
         'list-subusers' => null,
diff --git a/resources/views/server/js/filemanager/actions.blade.php b/resources/views/server/js/filemanager/actions.blade.php
index a2e74c56..04620f2b 100644
--- a/resources/views/server/js/filemanager/actions.blade.php
+++ b/resources/views/server/js/filemanager/actions.blade.php
@@ -29,357 +29,370 @@ class ActionsClass {
         this.element = undefined;
     }
 
-    folder() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const currentName = decodeURIComponent(nameBlock.attr('data-name'));
-        const currentPath = decodeURIComponent(nameBlock.data('path'));
-
-        let inputValue = `${currentPath}${currentName}/`;
-        if ($(this.element).data('type') === 'file') {
-            inputValue = currentPath;
-        }
-        swal({
-            type: 'input',
-            title: 'Create Folder',
-            text: 'Please enter the path and folder name below.',
-            showCancelButton: true,
-            showConfirmButton: true,
-            closeOnConfirm: false,
-            showLoaderOnConfirm: true,
-            inputValue: inputValue
-        }, (val) => {
-            $.ajax({
-                type: 'POST',
-                headers: {
-                    'X-Access-Token': '{{ $server->daemonSecret }}',
-                    'X-Access-Server': '{{ $server->uuid }}'
-                },
-                contentType: 'application/json; charset=utf-8',
-                url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/folder',
-                timeout: 10000,
-                data: JSON.stringify({
-                    path: val,
-                }),
-            }).done(data => {
-                swal.close();
-                Files.list();
-            }).fail(jqXHR => {
-                console.error(jqXHR);
-                var error = 'An error occured while trying to process this request.';
-                if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
-                    error = jqXHR.responseJSON.error;
-                }
-                swal({
-                    type: 'error',
-                    title: '',
-                    text: error,
-                });
-            });
-        });
-    }
-
-    move() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const currentName = decodeURIComponent(nameBlock.attr('data-name'));
-        const currentPath = decodeURIComponent(nameBlock.data('path'));
-
-        swal({
-            type: 'input',
-            title: 'Move File',
-            text: 'Please enter the new path for the file below.',
-            showCancelButton: true,
-            showConfirmButton: true,
-            closeOnConfirm: false,
-            showLoaderOnConfirm: true,
-            inputValue: `${currentPath}${currentName}`,
-        }, (val) => {
-            $.ajax({
-                type: 'POST',
-                headers: {
-                    'X-Access-Token': '{{ $server->daemonSecret }}',
-                    'X-Access-Server': '{{ $server->uuid }}'
-                },
-                contentType: 'application/json; charset=utf-8',
-                url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/move',
-                timeout: 10000,
-                data: JSON.stringify({
-                    from: `${currentPath}${currentName}`,
-                    to: `${val}`,
-                }),
-            }).done(data => {
-                nameBlock.parent().addClass('warning').delay(200).fadeOut();
-                swal.close();
-            }).fail(jqXHR => {
-                console.error(jqXHR);
-                var error = 'An error occured while trying to process this request.';
-                if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
-                    error = jqXHR.responseJSON.error;
-                }
-                swal({
-                    type: 'error',
-                    title: '',
-                    text: error,
-                });
-            });
-        });
-
-    }
-
-    copy() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const currentName = decodeURIComponent(nameBlock.attr('data-name'));
-        const currentPath = decodeURIComponent(nameBlock.data('path'));
-
-        swal({
-            type: 'input',
-            title: 'Copy File',
-            text: 'Please enter the new path for the copied file below.',
-            showCancelButton: true,
-            showConfirmButton: true,
-            closeOnConfirm: false,
-            showLoaderOnConfirm: true,
-            inputValue: `${currentPath}${currentName}`,
-        }, (val) => {
-            $.ajax({
-                type: 'POST',
-                headers: {
-                    'X-Access-Token': '{{ $server->daemonSecret }}',
-                    'X-Access-Server': '{{ $server->uuid }}'
-                },
-                contentType: 'application/json; charset=utf-8',
-                url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/copy',
-                timeout: 10000,
-                data: JSON.stringify({
-                    from: `${currentPath}${currentName}`,
-                    to: `${val}`,
-                }),
-            }).done(data => {
-                swal({
-                    type: 'success',
-                    title: '',
-                    text: 'File successfully copied.'
-                });
-                Files.list();
-            }).fail(jqXHR => {
-                console.error(jqXHR);
-                var error = 'An error occured while trying to process this request.';
-                if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
-                    error = jqXHR.responseJSON.error;
-                }
-                swal({
-                    type: 'error',
-                    title: '',
-                    text: error,
-                });
-            });
-        });
-
-    }
-
-    download() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const fileName = decodeURIComponent(nameBlock.attr('data-name'));
-        const filePath = decodeURIComponent(nameBlock.data('path'));
-
-        window.location = `/server/{{ $server->uuidShort }}/files/download/${filePath}${fileName}`;
-    }
-
-    rename() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const currentLink = nameBlock.find('a');
-        const currentName = decodeURIComponent(nameBlock.attr('data-name'));
-        const attachEditor = `
-            <input class="form-control input-sm" type="text" value="${currentName}" />
-            <span class="input-loader"><i class="fa fa-refresh fa-spin fa-fw"></i></span>
-        `;
-
-        nameBlock.html(attachEditor);
-        const inputField = nameBlock.find('input');
-        const inputLoader = nameBlock.find('.input-loader');
-
-        inputField.focus();
-        inputField.on('blur keydown', e => {
-            // Save Field
-            if (
-                (e.type === 'keydown' && e.which === 27)
-                || e.type === 'blur'
-                || (e.type === 'keydown' && e.which === 13 && currentName === inputField.val())
-            ) {
-                if (!_.isEmpty(currentLink)) {
-                    nameBlock.html(currentLink);
-                } else {
-                    nameBlock.html(currentName);
-                }
-                inputField.remove();
-                ContextMenu.unbind().run();
-                return;
-            }
-
-            if (e.type === 'keydown' && e.which !== 13) return;
-
-            inputLoader.show();
+    @can('create-files', $server)
+        folder() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const currentName = decodeURIComponent(nameBlock.attr('data-name'));
             const currentPath = decodeURIComponent(nameBlock.data('path'));
 
+            let inputValue = `${currentPath}${currentName}/`;
+            if ($(this.element).data('type') === 'file') {
+                inputValue = currentPath;
+            }
+            swal({
+                type: 'input',
+                title: 'Create Folder',
+                text: 'Please enter the path and folder name below.',
+                showCancelButton: true,
+                showConfirmButton: true,
+                closeOnConfirm: false,
+                showLoaderOnConfirm: true,
+                inputValue: inputValue
+            }, (val) => {
+                $.ajax({
+                    type: 'POST',
+                    headers: {
+                        'X-Access-Token': '{{ $server->daemonSecret }}',
+                        'X-Access-Server': '{{ $server->uuid }}'
+                    },
+                    contentType: 'application/json; charset=utf-8',
+                    url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/folder',
+                    timeout: 10000,
+                    data: JSON.stringify({
+                        path: val,
+                    }),
+                }).done(data => {
+                    swal.close();
+                    Files.list();
+                }).fail(jqXHR => {
+                    console.error(jqXHR);
+                    var error = 'An error occured while trying to process this request.';
+                    if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
+                        error = jqXHR.responseJSON.error;
+                    }
+                    swal({
+                        type: 'error',
+                        title: '',
+                        text: error,
+                    });
+                });
+            });
+        }
+    @endcan
+
+    @can('move-files', $server)
+        move() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const currentName = decodeURIComponent(nameBlock.attr('data-name'));
+            const currentPath = decodeURIComponent(nameBlock.data('path'));
+
+            swal({
+                type: 'input',
+                title: 'Move File',
+                text: 'Please enter the new path for the file below.',
+                showCancelButton: true,
+                showConfirmButton: true,
+                closeOnConfirm: false,
+                showLoaderOnConfirm: true,
+                inputValue: `${currentPath}${currentName}`,
+            }, (val) => {
+                $.ajax({
+                    type: 'POST',
+                    headers: {
+                        'X-Access-Token': '{{ $server->daemonSecret }}',
+                        'X-Access-Server': '{{ $server->uuid }}'
+                    },
+                    contentType: 'application/json; charset=utf-8',
+                    url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/move',
+                    timeout: 10000,
+                    data: JSON.stringify({
+                        from: `${currentPath}${currentName}`,
+                        to: `${val}`,
+                    }),
+                }).done(data => {
+                    nameBlock.parent().addClass('warning').delay(200).fadeOut();
+                    swal.close();
+                }).fail(jqXHR => {
+                    console.error(jqXHR);
+                    var error = 'An error occured while trying to process this request.';
+                    if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
+                        error = jqXHR.responseJSON.error;
+                    }
+                    swal({
+                        type: 'error',
+                        title: '',
+                        text: error,
+                    });
+                });
+            });
+
+        }
+
+        rename() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const currentLink = nameBlock.find('a');
+            const currentName = decodeURIComponent(nameBlock.attr('data-name'));
+            const attachEditor = `
+                <input class="form-control input-sm" type="text" value="${currentName}" />
+                <span class="input-loader"><i class="fa fa-refresh fa-spin fa-fw"></i></span>
+            `;
+
+            nameBlock.html(attachEditor);
+            const inputField = nameBlock.find('input');
+            const inputLoader = nameBlock.find('.input-loader');
+
+            inputField.focus();
+            inputField.on('blur keydown', e => {
+                // Save Field
+                if (
+                    (e.type === 'keydown' && e.which === 27)
+                    || e.type === 'blur'
+                    || (e.type === 'keydown' && e.which === 13 && currentName === inputField.val())
+                ) {
+                    if (!_.isEmpty(currentLink)) {
+                        nameBlock.html(currentLink);
+                    } else {
+                        nameBlock.html(currentName);
+                    }
+                    inputField.remove();
+                    ContextMenu.unbind().run();
+                    return;
+                }
+
+                if (e.type === 'keydown' && e.which !== 13) return;
+
+                inputLoader.show();
+                const currentPath = decodeURIComponent(nameBlock.data('path'));
+
+                $.ajax({
+                    type: 'POST',
+                    headers: {
+                        'X-Access-Token': '{{ $server->daemonSecret }}',
+                        'X-Access-Server': '{{ $server->uuid }}'
+                    },
+                    contentType: 'application/json; charset=utf-8',
+                    url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/rename',
+                    timeout: 10000,
+                    data: JSON.stringify({
+                        from: `${currentPath}${currentName}`,
+                        to: `${currentPath}${inputField.val()}`,
+                    }),
+                }).done(data => {
+                    nameBlock.attr('data-name', inputField.val());
+                    if (!_.isEmpty(currentLink)) {
+                        let newLink = currentLink.attr('href');
+                        if (nameBlock.parent().data('type') !== 'folder') {
+                            newLink = newLink.substr(0, newLink.lastIndexOf('/')) + '/' + inputField.val();
+                        }
+                        currentLink.attr('href', newLink);
+                        nameBlock.html(
+                            currentLink.html(inputField.val())
+                        );
+                    } else {
+                        nameBlock.html(inputField.val());
+                    }
+                    inputField.remove();
+                }).fail(jqXHR => {
+                    console.error(jqXHR);
+                    var error = 'An error occured while trying to process this request.';
+                    if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
+                        error = jqXHR.responseJSON.error;
+                    }
+                    nameBlock.addClass('has-error').delay(2000).queue(() => {
+                        nameBlock.removeClass('has-error').dequeue();
+                    });
+                    inputField.popover({
+                        animation: true,
+                        placement: 'top',
+                        content: error,
+                        title: 'Save Error'
+                    }).popover('show');
+                }).always(() => {
+                    inputLoader.remove();
+                    ContextMenu.unbind().run();
+                });
+            });
+        }
+    @endcan
+
+    @can('copy-files', $server)
+        copy() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const currentName = decodeURIComponent(nameBlock.attr('data-name'));
+            const currentPath = decodeURIComponent(nameBlock.data('path'));
+
+            swal({
+                type: 'input',
+                title: 'Copy File',
+                text: 'Please enter the new path for the copied file below.',
+                showCancelButton: true,
+                showConfirmButton: true,
+                closeOnConfirm: false,
+                showLoaderOnConfirm: true,
+                inputValue: `${currentPath}${currentName}`,
+            }, (val) => {
+                $.ajax({
+                    type: 'POST',
+                    headers: {
+                        'X-Access-Token': '{{ $server->daemonSecret }}',
+                        'X-Access-Server': '{{ $server->uuid }}'
+                    },
+                    contentType: 'application/json; charset=utf-8',
+                    url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/copy',
+                    timeout: 10000,
+                    data: JSON.stringify({
+                        from: `${currentPath}${currentName}`,
+                        to: `${val}`,
+                    }),
+                }).done(data => {
+                    swal({
+                        type: 'success',
+                        title: '',
+                        text: 'File successfully copied.'
+                    });
+                    Files.list();
+                }).fail(jqXHR => {
+                    console.error(jqXHR);
+                    var error = 'An error occured while trying to process this request.';
+                    if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
+                        error = jqXHR.responseJSON.error;
+                    }
+                    swal({
+                        type: 'error',
+                        title: '',
+                        text: error,
+                    });
+                });
+            });
+        }
+    @endcan
+
+    @can('download-files', $server)
+        download() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const fileName = decodeURIComponent(nameBlock.attr('data-name'));
+            const filePath = decodeURIComponent(nameBlock.data('path'));
+
+            window.location = `/server/{{ $server->uuidShort }}/files/download/${filePath}${fileName}`;
+        }
+    @endcan
+
+    @can('delete-files', $server)
+        delete() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const delPath = decodeURIComponent(nameBlock.data('path'));
+            const delName = decodeURIComponent(nameBlock.data('name'));
+
+            swal({
+                type: 'warning',
+                title: '',
+                text: 'Are you sure you want to delete <code>' + delName + '</code>? There is <strong>no</strong> reversing this action.',
+                html: true,
+                showCancelButton: true,
+                showConfirmButton: true,
+                closeOnConfirm: false,
+                showLoaderOnConfirm: true
+            }, () => {
+                $.ajax({
+                    type: 'DELETE',
+                    url: `{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/f/${delPath}${delName}`,
+                    headers: {
+                        'X-Access-Token': '{{ $server->daemonSecret }}',
+                        'X-Access-Server': '{{ $server->uuid }}'
+                    }
+                }).done(data => {
+                    nameBlock.parent().addClass('warning').delay(200).fadeOut();
+                    swal({
+                        type: 'success',
+                        title: 'File Deleted'
+                    });
+                }).fail(jqXHR => {
+                    console.error(jqXHR);
+                    swal({
+                        type: 'error',
+                        title: 'Whoops!',
+                        html: true,
+                        text: 'An error occured while attempting to delete this file. Please try again.',
+                    });
+                });
+            });
+        }
+    @endcan
+
+    @can('decompress-files', $server)
+        decompress() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const compPath = decodeURIComponent(nameBlock.data('path'));
+            const compName = decodeURIComponent(nameBlock.data('name'));
+
             $.ajax({
                 type: 'POST',
+                url: `{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/decompress`,
                 headers: {
                     'X-Access-Token': '{{ $server->daemonSecret }}',
                     'X-Access-Server': '{{ $server->uuid }}'
                 },
                 contentType: 'application/json; charset=utf-8',
-                url: '{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/rename',
-                timeout: 10000,
                 data: JSON.stringify({
-                    from: `${currentPath}${currentName}`,
-                    to: `${currentPath}${inputField.val()}`,
-                }),
+                    files: `${compPath}${compName}`
+                })
             }).done(data => {
-                nameBlock.attr('data-name', inputField.val());
-                if (!_.isEmpty(currentLink)) {
-                    let newLink = currentLink.attr('href');
-                    if (nameBlock.parent().data('type') !== 'folder') {
-                        newLink = newLink.substr(0, newLink.lastIndexOf('/')) + '/' + inputField.val();
-                    }
-                    currentLink.attr('href', newLink);
-                    nameBlock.html(
-                        currentLink.html(inputField.val())
-                    );
-                } else {
-                    nameBlock.html(inputField.val());
-                }
-                inputField.remove();
+                Files.list(compPath);
             }).fail(jqXHR => {
                 console.error(jqXHR);
                 var error = 'An error occured while trying to process this request.';
                 if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
                     error = jqXHR.responseJSON.error;
                 }
-                nameBlock.addClass('has-error').delay(2000).queue(() => {
-                    nameBlock.removeClass('has-error').dequeue();
-                });
-                inputField.popover({
-                    animation: true,
-                    placement: 'top',
-                    content: error,
-                    title: 'Save Error'
-                }).popover('show');
-            }).always(() => {
-                inputLoader.remove();
-                ContextMenu.unbind().run();
-            });
-        });
-    }
-
-    delete() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const delPath = decodeURIComponent(nameBlock.data('path'));
-        const delName = decodeURIComponent(nameBlock.data('name'));
-
-        swal({
-            type: 'warning',
-            title: '',
-            text: 'Are you sure you want to delete <code>' + delName + '</code>? There is <strong>no</strong> reversing this action.',
-            html: true,
-            showCancelButton: true,
-            showConfirmButton: true,
-            closeOnConfirm: false,
-            showLoaderOnConfirm: true
-        }, () => {
-            $.ajax({
-                type: 'DELETE',
-                url: `{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/f/${delPath}${delName}`,
-                headers: {
-                    'X-Access-Token': '{{ $server->daemonSecret }}',
-                    'X-Access-Server': '{{ $server->uuid }}'
-                }
-            }).done(data => {
-                nameBlock.parent().addClass('warning').delay(200).fadeOut();
-                swal({
-                    type: 'success',
-                    title: 'File Deleted'
-                });
-            }).fail(jqXHR => {
-                console.error(jqXHR);
                 swal({
                     type: 'error',
                     title: 'Whoops!',
                     html: true,
-                    text: 'An error occured while attempting to delete this file. Please try again.',
+                    text: error
                 });
             });
-        });
-    }
+        }
+    @endcan
 
-    decompress() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const compPath = decodeURIComponent(nameBlock.data('path'));
-        const compName = decodeURIComponent(nameBlock.data('name'));
+    @can('compress-files', $server)
+        compress() {
+            const nameBlock = $(this.element).find('td[data-identifier="name"]');
+            const compPath = decodeURIComponent(nameBlock.data('path'));
+            const compName = decodeURIComponent(nameBlock.data('name'));
 
-        $.ajax({
-            type: 'POST',
-            url: `{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/decompress`,
-            headers: {
-                'X-Access-Token': '{{ $server->daemonSecret }}',
-                'X-Access-Server': '{{ $server->uuid }}'
-            },
-            contentType: 'application/json; charset=utf-8',
-            data: JSON.stringify({
-                files: `${compPath}${compName}`
-            })
-        }).done(data => {
-            Files.list(compPath);
-        }).fail(jqXHR => {
-            console.error(jqXHR);
-            var error = 'An error occured while trying to process this request.';
-            if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
-                error = jqXHR.responseJSON.error;
-            }
-            swal({
-                type: 'error',
-                title: 'Whoops!',
-                html: true,
-                text: error
-            });
-        });
-    }
-
-    compress() {
-        const nameBlock = $(this.element).find('td[data-identifier="name"]');
-        const compPath = decodeURIComponent(nameBlock.data('path'));
-        const compName = decodeURIComponent(nameBlock.data('name'));
-
-        $.ajax({
-            type: 'POST',
-            url: `{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/compress`,
-            headers: {
-                'X-Access-Token': '{{ $server->daemonSecret }}',
-                'X-Access-Server': '{{ $server->uuid }}'
-            },
-            contentType: 'application/json; charset=utf-8',
-            data: JSON.stringify({
-                files: `${compPath}${compName}`,
-                to: compPath.toString()
-            })
-        }).done(data => {
-            Files.list(compPath, err => {
-                if (err) return;
-                const fileListing = $('#file_listing').find(`[data-name="${data.saved_as}"]`).parent();
-                fileListing.addClass('success pulsate').delay(3000).queue(() => {
-                    fileListing.removeClass('success pulsate').dequeue();
+            $.ajax({
+                type: 'POST',
+                url: `{{ $node->scheme }}://{{ $node->fqdn }}:{{ $node->daemonListen }}/server/file/compress`,
+                headers: {
+                    'X-Access-Token': '{{ $server->daemonSecret }}',
+                    'X-Access-Server': '{{ $server->uuid }}'
+                },
+                contentType: 'application/json; charset=utf-8',
+                data: JSON.stringify({
+                    files: `${compPath}${compName}`,
+                    to: compPath.toString()
+                })
+            }).done(data => {
+                Files.list(compPath, err => {
+                    if (err) return;
+                    const fileListing = $('#file_listing').find(`[data-name="${data.saved_as}"]`).parent();
+                    fileListing.addClass('success pulsate').delay(3000).queue(() => {
+                        fileListing.removeClass('success pulsate').dequeue();
+                    });
+                });
+            }).fail(jqXHR => {
+                console.error(jqXHR);
+                var error = 'An error occured while trying to process this request.';
+                if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
+                    error = jqXHR.responseJSON.error;
+                }
+                swal({
+                    type: 'error',
+                    title: 'Whoops!',
+                    html: true,
+                    text: error
                 });
             });
-        }).fail(jqXHR => {
-            console.error(jqXHR);
-            var error = 'An error occured while trying to process this request.';
-            if (typeof jqXHR.responseJSON !== 'undefined' && typeof jqXHR.responseJSON.error !== 'undefined') {
-                error = jqXHR.responseJSON.error;
-            }
-            swal({
-                type: 'error',
-                title: 'Whoops!',
-                html: true,
-                text: error
-            });
-        });
-    }
+        }
+    @endcan
 }
diff --git a/resources/views/server/js/filemanager/contextmenu.blade.php b/resources/views/server/js/filemanager/contextmenu.blade.php
index c68a0046..a4111415 100644
--- a/resources/views/server/js/filemanager/contextmenu.blade.php
+++ b/resources/views/server/js/filemanager/contextmenu.blade.php
@@ -41,17 +41,17 @@ class ContextMenuClass {
             newFilePath = `${currentPath}${currentName}`;
         }
         return '<ul id="fileOptionMenu" class="dropdown-menu" role="menu" style="display:none" > \
-                    <li data-action="move"><a tabindex="-1" href="#"><i class="fa fa-fw fa-arrow-right"></i> Move</a></li> \
-                    <li data-action="copy"><a tabindex="-1" href="#"><i class="fa fa-fw fa-clone"></i> Copy</a></li> \
-                    <li data-action="rename"><a tabindex="-1" href="#"><i class="fa fa-fw fa-pencil-square-o"></i> Rename</a></li> \
-                    <li data-action="compress" class="hidden"><a tabindex="-1" href="#"><i class="fa fa-fw fa-file-archive-o"></i> Compress</a></li> \
-                    <li data-action="decompress" class="hidden"><a tabindex="-1" href="#"><i class="fa fa-fw fa-expand"></i> Decompress</a></li> \
+                    @can('move-files', $server)<li data-action="move"><a tabindex="-1" href="#"><i class="fa fa-fw fa-arrow-right"></i> Move</a></li>@endcan \
+                    @can('copy-files', $server)<li data-action="copy"><a tabindex="-1" href="#"><i class="fa fa-fw fa-clone"></i> Copy</a></li>@endcan \
+                    @can('move-files', $server)<li data-action="rename"><a tabindex="-1" href="#"><i class="fa fa-fw fa-pencil-square-o"></i> Rename</a></li>@endcan \
+                    @can('compress-files', $server)<li data-action="compress" class="hidden"><a tabindex="-1" href="#"><i class="fa fa-fw fa-file-archive-o"></i> Compress</a></li>@endcan \
+                    @can('decompress-files', $server)<li data-action="decompress" class="hidden"><a tabindex="-1" href="#"><i class="fa fa-fw fa-expand"></i> Decompress</a></li>@endcan \
                     <li class="divider"></li> \
-                    <li data-action="file"><a href="/server/{{ $server->uuidShort }}/files/add/?dir=' + newFilePath + '" class="text-muted"><i class="fa fa-fw fa-plus"></i> New File</a></li> \
-                    <li data-action="folder"><a tabindex="-1" href="#"><i class="fa fa-fw fa-folder"></i> New Folder</a></li> \
+                    @can('create-files', $server)<li data-action="file"><a href="/server/{{ $server->uuidShort }}/files/add/?dir=' + newFilePath + '" class="text-muted"><i class="fa fa-fw fa-plus"></i> New File</a></li> \
+                    <li data-action="folder"><a tabindex="-1" href="#"><i class="fa fa-fw fa-folder"></i> New Folder</a></li>@endcan \
                     <li class="divider"></li> \
-                    <li data-action="download" class="hidden"><a tabindex="-1" href="#"><i class="fa fa-fw fa-download"></i> Download</a></li> \
-                    <li data-action="delete" class="bg-danger"><a tabindex="-1" href="#"><i class="fa fa-fw fa-trash-o"></i> Delete</a></li> \
+                    @can('download-files', $server)<li data-action="download" class="hidden"><a tabindex="-1" href="#"><i class="fa fa-fw fa-download"></i> Download</a></li>@endcan \
+                    @can('delete-files', $server)<li data-action="delete" class="bg-danger"><a tabindex="-1" href="#"><i class="fa fa-fw fa-trash-o"></i> Delete</a></li>@endcan \
                 </ul>';
     }
 
@@ -74,54 +74,74 @@ class ContextMenuClass {
             this.activeLine = parent;
             this.activeLine.addClass('active');
 
-            if (parent.data('type') === 'file') {
-                $(menu).find('li[data-action="download"]').removeClass('hidden');
-            }
+            @can('download-files', $server)
+                if (parent.data('type') === 'file') {
+                    $(menu).find('li[data-action="download"]').removeClass('hidden');
+                }
+            @endcan
 
-            if (parent.data('type') === 'folder') {
-                $(menu).find('li[data-action="compress"]').removeClass('hidden');
-            }
+            @can('compress-files', $server)
+                if (parent.data('type') === 'folder') {
+                    $(menu).find('li[data-action="compress"]').removeClass('hidden');
+                }
+            @endcan
 
-            if (_.without(['application/zip', 'application/gzip', 'application/x-gzip'], parent.data('mime')).length < 3) {
-                $(menu).find('li[data-action="decompress"]').removeClass('hidden');
-            }
+            @can('decompress-files', $server)
+                if (_.without(['application/zip', 'application/gzip', 'application/x-gzip'], parent.data('mime')).length < 3) {
+                    $(menu).find('li[data-action="decompress"]').removeClass('hidden');
+                }
+            @endcan
 
             // Handle Events
             const Actions = new ActionsClass(parent, menu);
-            $(menu).find('li[data-action="move"]').unbind().on('click', e => {
-                e.preventDefault();
-                Actions.move();
-            });
+            @can('move-files', $server)
+                $(menu).find('li[data-action="move"]').unbind().on('click', e => {
+                    e.preventDefault();
+                    Actions.move();
+                });
+            @endcan
 
-            $(menu).find('li[data-action="copy"]').unbind().on('click', e => {
-                e.preventDefault();
-                Actions.copy();
-            });
+            @can('copy-files', $server)
+                $(menu).find('li[data-action="copy"]').unbind().on('click', e => {
+                    e.preventDefault();
+                    Actions.copy();
+                });
+            @endcan
 
-            $(menu).find('li[data-action="rename"]').unbind().on('click', e => {
-                e.preventDefault();
-                Actions.rename();
-            });
+            @can('move-files', $server)
+                $(menu).find('li[data-action="rename"]').unbind().on('click', e => {
+                    e.preventDefault();
+                    Actions.rename();
+                });
+            @endcan
 
-            $(menu).find('li[data-action="compress"]').unbind().on('click', e => {
-                e.preventDefault();
-                Actions.compress();
-            });
+            @can('compress-files', $server)
+                $(menu).find('li[data-action="compress"]').unbind().on('click', e => {
+                    e.preventDefault();
+                    Actions.compress();
+                });
+            @endcan
 
-            $(menu).find('li[data-action="decompress"]').unbind().on('click', e => {
-                e.preventDefault();
-                Actions.decompress();
-            });
+            @can('decompress-files', $server)
+                $(menu).find('li[data-action="decompress"]').unbind().on('click', e => {
+                    e.preventDefault();
+                    Actions.decompress();
+                });
+            @endcan
 
-            $(menu).find('li[data-action="folder"]').unbind().on('click', e => {
-                e.preventDefault();
-                Actions.folder();
-            });
+            @can('create-files', $server)
+                $(menu).find('li[data-action="folder"]').unbind().on('click', e => {
+                    e.preventDefault();
+                    Actions.folder();
+                });
+            @endcan
 
-            $(menu).find('li[data-action="download"]').unbind().on('click', e => {
-                e.preventDefault();
-                Actions.download();
-            });
+            @can('download-files', $server)
+                $(menu).find('li[data-action="download"]').unbind().on('click', e => {
+                    e.preventDefault();
+                    Actions.download();
+                });
+            @endcan
 
             $(menu).find('li[data-action="delete"]').unbind().on('click', e => {
                 e.preventDefault();
diff --git a/resources/views/server/users/new.blade.php b/resources/views/server/users/new.blade.php
index 44f35671..c954bcd4 100644
--- a/resources/views/server/users/new.blade.php
+++ b/resources/views/server/users/new.blade.php
@@ -96,7 +96,31 @@
                 </div>
                 <div class="checkbox highlight">
                     <label class="checkbox-custom highlight" data-initialize="checkbox">
-                        <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['add-files']))checked="checked"@endif value="add-files"> <strong>Create Files</strong>
+                        <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['move-files']))checked="checked"@endif value="move-files"> <strong>Rename &amp; Move Files</strong>
+                        <p class="text-muted"><small>Allows user to move and rename files and folders on the filesystem.</small><p>
+                    </label>
+                </div>
+                <div class="checkbox highlight">
+                    <label class="checkbox-custom highlight" data-initialize="checkbox">
+                        <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['copy-files']))checked="checked"@endif value="copy-files"> <strong>Copy Files</strong>
+                        <p class="text-muted"><small>Allows user to copy files and folders on the filesystem.</small><p>
+                    </label>
+                </div>
+                <div class="checkbox highlight">
+                    <label class="checkbox-custom highlight" data-initialize="checkbox">
+                        <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['compress-files']))checked="checked"@endif value="compress-files"> <strong>Compress Files</strong>
+                        <p class="text-muted"><small>Allows user to make archives of files and folders on the system.</small><p>
+                    </label>
+                </div>
+                <div class="checkbox highlight">
+                    <label class="checkbox-custom highlight" data-initialize="checkbox">
+                        <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['decompress-files']))checked="checked"@endif value="decompress-files"> <strong>Decompress Files</strong>
+                        <p class="text-muted"><small>Allows user to decompress <code>.zip</code> and <code>.tar / .tar.gz</code> archives.</small><p>
+                    </label>
+                </div>
+                <div class="checkbox highlight">
+                    <label class="checkbox-custom highlight" data-initialize="checkbox">
+                        <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['add-files']))checked="checked"@endif value="add-files"> <strong>Create Files &amp; Folders</strong>
                         <p class="text-muted"><small>Allows user to create a new file within the panel.</small><p>
                     </label>
                 </div>
diff --git a/resources/views/server/users/view.blade.php b/resources/views/server/users/view.blade.php
index f9851934..6ac4dc9a 100644
--- a/resources/views/server/users/view.blade.php
+++ b/resources/views/server/users/view.blade.php
@@ -83,6 +83,29 @@
                         <p class="text-muted"><small>Allows user to save modified file contents.</small><p>
                     </label>
                 </div>
+                <label class="checkbox-custom highlight" data-initialize="checkbox">
+                    <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['move-files']))checked="checked"@endif @cannot('edit-subuser', $server)disabled="disabled"@endcannot value="move-files"> <strong>Rename &amp; Move Files</strong>
+                    <p class="text-muted"><small>Allows user to move and rename files and folders on the filesystem.</small><p>
+                </label>
+            </div>
+            <div class="checkbox highlight">
+                <label class="checkbox-custom highlight" data-initialize="checkbox">
+                    <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['copy-files']))checked="checked"@endif @cannot('edit-subuser', $server)disabled="disabled"@endcannot value="copy-files"> <strong>Copy Files</strong>
+                    <p class="text-muted"><small>Allows user to copy files and folders on the filesystem.</small><p>
+                </label>
+            </div>
+            <div class="checkbox highlight">
+                <label class="checkbox-custom highlight" data-initialize="checkbox">
+                    <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['compress-files']))checked="checked"@endif @cannot('edit-subuser', $server)disabled="disabled"@endcannot value="compress-files"> <strong>Compress Files</strong>
+                    <p class="text-muted"><small>Allows user to make archives of files and folders on the system.</small><p>
+                </label>
+            </div>
+            <div class="checkbox highlight">
+                <label class="checkbox-custom highlight" data-initialize="checkbox">
+                    <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($oldInput['decompress-files']))checked="checked"@endif @cannot('edit-subuser', $server)disabled="disabled"@endcannot value="decompress-files"> <strong>Decompress Files</strong>
+                    <p class="text-muted"><small>Allows user to decompress <code>.zip</code> and <code>.tar / .tar.gz</code> archives.</small><p>
+                </label>
+            </div>
                 <div class="checkbox highlight">
                     <label class="checkbox-custom highlight" data-initialize="checkbox">
                         <input class="sr-only" name="permissions[]" type="checkbox" @if(isset($permissions['add-files']))checked="checked"@endif @cannot('edit-subuser', $server)disabled="disabled"@endcannot value="add-files"> <strong>Create Files</strong>