Apply access control on the upload page

Signed-of-by: Carlos Bezerra <carlosfilipe.lb@gmail.com>
Signed-of-by: Gustavo Correia <correia.gustavol@gmail.com>