The description says: "You need to set permissions for users to be allowed to upload and download in the dashboard. If you do not want users to upload except admin, change the permissions in the plugin to 'Garden.Settings.Manage'." Also, there is a note about forums not located in root.