Change permission checking - upload ajaxpage