Upload permissions live in event settings, so you decide whether it's open to everyone or limited to certain guests. Same settings area as guest list visibility .