fix bug with dragging files onto existing item, added check that user has permission to edit item before accepting upload