Require upload access to probe folder filenames

`does_entity_exist` and `get_new_title` APIs whitelisted without permission checks, allowing any logged-in user to enumerate folder contents and probe for file existence.