Policy isOwner on upload

Hi. you fixed this issue? I want the user to only upload image on the content type he is related to. right now any authenticated user can upload files and replace the image on any content type.