uploaded_files should have write permission