Restrict uploads to users with tm2z access