I have investigated some more, and also upgraded this site to 18.104.22.168.
The issue persists. We temporarily had some bad folder permissions, possibly due to having to copy the whole site folders around a couple of times during failed upgrades. So initially my test account in the "Content Administrators" role could not create a folder under media... now it can create a sub-folder through the "browse server" dialogue. However it still cannot upload even a small image file. This applies to any HTML Content instance. Again I get this in the system log:
2014-11-19 00:51:02,647 INFO (null) - (null) - (null) - mojoPortal.Web.Services.FileService - user not in allowed upload roles so returning 404
Yet a user in the "Admins" can upload just fine.
I'm wondering how the code detects these special roles...? Is it on role name? GUID? Could we have changed something inadvertently?
Here is our mp_Roles, with the affected row in bold, and showing that this role is aliased:
1 1 Admins ESDM Staff Site Administrators a4f6cdfe-ac46-42d8-9aa0-677e9b610580 c9a593f6-a346-4bb1-956a-8d121c5f77fe
2 1 Role Admins Role Administrators a4f6cdfe-ac46-42d8-9aa0-677e9b610580 b0bc5fa5-33d7-4852-94f2-2cb11d0747f5
3 1 Content Administrators ESDM Staff Content Admin a4f6cdfe-ac46-42d8-9aa0-677e9b610580 49b5fb3e-5102-41c4-b38e-3ebe691a1b6f
4 1 Authenticated Users All Authenticated Users a4f6cdfe-ac46-42d8-9aa0-677e9b610580 5b735417-2203-4030-a4dc-88edccc0b3bc
7 1 Newsletter Administrators ESDM Newsletter Admins a4f6cdfe-ac46-42d8-9aa0-677e9b610580 2fcc561f-81d1-40ba-805e-18ca1a4bb391
8 1 ESDM Client ESDM Client a4f6cdfe-ac46-42d8-9aa0-677e9b610580 f775e4e4-ef65-4e72-a6f8-f33236f8c5ec
10 1 ESDM Potential Client ESDM Potential Client a4f6cdfe-ac46-42d8-9aa0-677e9b610580 7fa9649c-c7c3-440e-a15e-1410c303ea96
13 1 CMSi Consortium CMSi Consortium a4f6cdfe-ac46-42d8-9aa0-677e9b610580 0a0b1081-4ae6-426e-9782-40d143aeb1dc
14 1 CMSi Developers CMSi Developers a4f6cdfe-ac46-42d8-9aa0-677e9b610580 d81f4106-31b8-4f97-ae1d-61a73b3edcda
15 1 ESDM Staff Read Only ESDM Staff Read Only a4f6cdfe-ac46-42d8-9aa0-677e9b610580 993c0ef0-0728-430a-b148-adb9fd60d07a
16 1 Marine Recorder Development Marine Recorder Development a4f6cdfe-ac46-42d8-9aa0-677e9b610580 38389383-eb24-47a0-9fbf-a410f43db30e
17 1 PACS Client PACS Client a4f6cdfe-ac46-42d8-9aa0-677e9b610580 0d64e11f-bb76-48d5-b0f6-f3c4dd82bec8
18 1 temp role ESDM File upload role a4f6cdfe-ac46-42d8-9aa0-677e9b610580 b864c95b-21c4-43f6-a9e7-a1137d704af9