Added env variable GOKAPI_DISABLE_REPLACE to displace replace feature…

…, until user permissions are added

internal/webserver/api/Api.go

@@ -11,6 +11,7 @@ import (
 	"github.com/forceu/gokapi/internal/webserver/fileupload"
 	"io"
 	"net/http"
+	"os"
 	"strconv"
 	"strings"
 	"time"
@@ -390,6 +391,11 @@ func replaceFile(w http.ResponseWriter, request apiRequest) {
 		sendError(w, http.StatusBadRequest, err.Error())
 		return
 	}
+	// TODO remove with 2.0 once user control has been added
+	if os.Getenv("GOKAPI_DISABLE_REPLACE") != "" {
+		sendError(w, http.StatusUnauthorized, "Replace file is disabled")
+		return
+	}
 	modifiedFile, err := storage.ReplaceFile(request.fileInfo.id, request.filemodInfo.idNewContent, request.filemodInfo.deleteNewFile)
 	if err != nil {
 		switch {