Create a dedicated "repo" group whose members will be allowed to upload packages. This way we do not have to give people the admin password ;-)