If you look at the KFM Files in webassist/kfm/index.php, the security access rule is applied to that file to restrict access to the file manager.
Thanks Jason. I got that. What I wanted to know is, if I emulate the WA code in KFM, is there a way to get HTMLEditor to reference KCFinder config instead of KFM so the Website/Editor file upload preferences still work?
BTW, is there any projection on updating HTMLEditor? If not, please consider patching HTMLEditor with other options. There has been no development on KFM for 2 years and it really is broken since IE9 at least and it does not work well in IE8.