authenticated=user,editor
uploader=editor