do not show upload if not allowed