limiting uploaded files to owners only