Is it safe to allow /wp-admin/async-upload.php

Hi guys,

Love your plugin.

I’ve disallowed uploads (except for admin), but in .htninja I’ve allowed the wp-admin/async-upload.php script.

I’ve done this so one type of user role can upload files. Is this safe to do? I do not want to white-list all logged in users just to allow them to attach images in Posts.

I’d like to know if I’m shooting myself in the foot here.