Upload API does not use coauthors and reviewers

The upload API does only look for admin and main_author. Consequently, non main_authors cannot see or work with an upload.