Yeah, don't need to be admin to access uploaded files