I am creating a problem ticket form/xpage.  I'd like the user to be able to upload a file (screencapture or log).  I've added a FileUpload control and bound it to a backend document RichText field.  When I submit the attachment isn't saved.  I also noticed that there are issues in the log file on security (path not found for upload /tmp dir and file types not being allowed).

 

So:

(1) Where are these security limitations set? 

(2) If in the INI or server doc then how do developers actually have an upload control on their forms and save to the document if we can't effect these settings?

 

Thanks.