Not sure why checking user permissions relies on `mUpload` but I'll trust you on this one :)