Added upload field and added working permissions to restrict who can view the BPMN nodes since they might have sensitive information in them