no anonymous upload on read-only folders