public/non-public uploads