/** * Before filter callback. * * @param CakeEvent $event */ public function beforeFilter(CakeEvent $event) { parent::beforeFilter($event); $this->Security->config('unlockedActions', ['upload']); }