diff --git a/authz/authz.go b/authz/authz.go
index d9436045..70174d61 100644
--- a/authz/authz.go
+++ b/authz/authz.go
@@ -161,6 +161,11 @@ func isAllowedInDemoMode(subOwner string, subName string, method string, urlPath
 				return true
 			}
 			return false
+		} else if urlPath == "/api/upload-resource" {
+			if subOwner == "app" && subName == "app-casibase" {
+				return true
+			}
+			return false
 		} else {
 			return false
 		}