add strperms_to_hsh for upload perms; add _can_upload for uploads