fixed user lock check on upload