update chosen, add file-upload, add permissions