Change to allowed file list to an exception list

Taken from the SRS for 5.x.3.2:

R-DBFM5X3-2004 The Allowed file-type per role list will be removed and replaced with a global “banned file-type” list. Per-role file-type exceptions will be allowed.