grants full management permissions to file uploads, but only to certain users