diff --git a/app/Controller/Component/ACLComponent.php b/app/Controller/Component/ACLComponent.php
index bb7ceb35f..82e0619c2 100644
--- a/app/Controller/Component/ACLComponent.php
+++ b/app/Controller/Component/ACLComponent.php
@@ -118,7 +118,7 @@ class ACLComponent extends Component {
 					'strposarray' => array(),
 					'toggleCorrelation' => array('perm_add'),
 					'updateGraph' => array('*'),
-					'upload_sample' => array('perm_auth'),
+					'upload_sample' => array('AND' => array('perm_auth', 'perm_add')),
 					'view' => array('*'),
 					'viewEventAttributes' => array('*'),
 					'viewGraph' => array('*'),
@@ -243,9 +243,9 @@ class ACLComponent extends Component {
 					'index' => array('OR' => array('perm_sync', 'perm_admin')),
 					'previewEvent' => array(),
 					'previewIndex' => array(),
-					'pull' => array('perm_auth'),
+					'pull' => array(),
 					'purgeSessions' => array(),
-					'push' => array('perm_auth'),
+					'push' => array(),
 					'restartWorkers' => array(),
 					'serverSettings' => array(),
 					'serverSettingsEdit' => array(),