set readonly on upload page