Changed perms needed to access sub upload. closes #590