Upload - add upload with permission