works for api upload but does not allow to upload to locked projects