assigning file upload permission to roles