Add settings to upload features

[michaellwest]

Couple ideas come to mind:

• Disable the file upload option by default and provide a setting to enable
• Provide an option to restrict file upload to specific groups and users

[michaellwest]

This would be a continuation of #1362 .

[fluxdigital]

These options both seem sensible to me @michaellwest. Perhaps the easiest fix for now is disabling uploads by default with a setting to enable.

[michaellwest]

I see a few options on how to disable the upload

• add an attribute to the <uploadFile> tag to enable/disable the upload.
• add a separate element below the <uploadFile> tag to represent the enable/disable.
• add a new with "Spe.DisableFileUpload". - This might get confused with the

What would you recommend?

[AdamNaj]

By default the upload is disabled because the approved folder list is empty which is why I wouldn';t sweat about disabling it further.

The challenge as I see it is to provide ability to define folders that will adapt to environments without too much hassle (e.g. between developer machine and Azure hosting env).

This is why I've added the support for the OOTB variables such as:

Variable	Example
$SitecoreDataFolder	<webroot>\App_Data
$SitecoreDebugFolder	<webroot>\App_Data\debug
$SitecoreIndexFolder	<webroot>\App_Data\indexes
$SitecoreLayoutFolder	<webroot>\layouts
$SitecoreLogFolder	<webroot>\App_Data\logs
$SitecoreMediaFolder	<webroot>\upload
$SitecorePackageFolder	<webroot>\App_Data\packages
$SitecoreSerializationFolder	<webroot>\App_Data\serialization
$SitecoreTempFolder	<webroot>\temp
$tempPath	C:\WINDOWS\TEMP
$tmpPath	C:\WINDOWS\TEMP

Also on top of the already existing whitelist for images I've whitelisted Excel and csv files as some of the importers rely on those.