allow the user to login but do not allow upload and show error message on the web