only uploaders may delete files