Besides keeping track of who gave which dataset, it is needed to limit the deletion and update actions in the Ingestion API, i.e., to ensure that a given data provider does not drop or update datasets other that the ones it has uploaded.

This mechanism should be included in the /upload service.