Always set file and directory permissions in public upload

In !203 (merged) the public upload was changed to generate temporary directories with tempfile.mkdtemp. This creates directories with minimal permissions. Those need to be reset to 0755.

At the same time all the other permissions should be made explicit.