Note: Security restrictions are implemented in the security.ini and .htaccess files. By default, only the admin user is permitted to upload files via the Document Manager. Individual directories can then be secured on a per-user or per-group basis via the .htaccess mechanism.