feat: dataset file upload auth

api/controllers/console/datasets/file.py

 from flask import request
 from flask_login import current_user
 from flask_restful import Resource, marshal_with
+from werkzeug.exceptions import Forbidden
 
 import services
 from configs import dify_config
     @marshal_with(file_fields)
     @cloud_edition_billing_resource_check("documents")
     def post(self):
+        if current_user.is_dataset_editor:
+            raise Forbidden()
+        
         # get file from request
         file = request.files["file"]