[drupal-devel] Is the 'upload files' permission necessary?