test file upload (permissions)