Allow upload by the admin only

[aminnairi]

Problem statement

Currently, everyone can upload on any quickdrop instance, which can be unintentional for administrators wanting to provide only download capabilities, but not to be able to upload from anyone.

Proposed solution

Provide an environment variable like ADMIN_UPLOAD_ONLY: true in order to prevent uploads from anonymous. This should still allow download from anyone, or per the settings.

Alternatives considered

No response

Scope

• I'm willing to implement this (or help)
• This needs discussion before implementation

[RoastSlav]

Hello, I mean this functionality can be achieved with an app password, and you create a share link for the file. Share links skip both file and app passwords. This way nobody can access it without a password to upload and you can still provide links for downloads.