implement authz for csv-upload.