allow looking up upload details
provide sensible defaults when no acls are provided
enable acls for uploads as well.