Restrict upload-image action to unattached volumes