allow access to artwork upload resource