fixed the file upload, also added corect ACLs to users and Admins