How to limit the authority for downloading the submissions?