only enable drag&drop upload if public upload is allowed

backport of #7631, original issue #7422 

cc @PVince81 can you give it a quick try (my file manager doesn't support drag&drop to the browser)? Thanks!