Non-admins can save (but not overwrite) file uploads.