Hide file upload links if there is no permission. Fix #435