How can I prevent client users from uploading files?