i think we should port this over to MediaBundle as well. file upload without any access check sounds really bad. you can still configure the role to the anonymous role if you want to handle things with a firewall, but the default behaviour must be secure and not dangerous.