fixed docUpload permissions