diff --git a/applications/luci-app-banip/Makefile b/applications/luci-app-banip/Makefile
index 9a9fe631d8..ee5e3b49ed 100644
--- a/applications/luci-app-banip/Makefile
+++ b/applications/luci-app-banip/Makefile
@@ -7,7 +7,7 @@ LUCI_TITLE:=LuCI support for banIP
 LUCI_DEPENDS:=+luci-base +banip
 
 PKG_VERSION:=1.8.10
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 PKG_LICENSE:=Apache-2.0
 PKG_MAINTAINER:=Dirk Brenken <dev@brenken.org>
 
diff --git a/applications/luci-app-banip/root/usr/share/rpcd/acl.d/luci-app-banip.json b/applications/luci-app-banip/root/usr/share/rpcd/acl.d/luci-app-banip.json
index 6ab134fd38..9246c4e658 100644
--- a/applications/luci-app-banip/root/usr/share/rpcd/acl.d/luci-app-banip.json
+++ b/applications/luci-app-banip/root/usr/share/rpcd/acl.d/luci-app-banip.json
@@ -2,43 +2,48 @@
 	"luci-app-banip": {
 		"description": "Grant access to LuCI app banIP",
 		"write": {
+			"cgi-io": [
+				"upload"
+			],
 			"uci": [
 				"banip"
 			],
 			"file": {
-				"/etc/banip/*": [
-					"read"
-				],
 				"/etc/banip/banip.allowlist": [
-					"read",
 					"write"
 				],
 				"/etc/banip/banip.blocklist": [
-					"read",
 					"write"
 				],
 				"/etc/banip/banip.custom.feeds": [
-					"read",
 					"write"
 				],
 				"/var/run/banIP/banIP.search": [
-					"read",
 					"write"
 				],
 				"/var/run/banIP/banIP.report": [
-					"read",
 					"write"
 				]
 			}
 		},
 		"read": {
 			"cgi-io": [
+				"download",
 				"exec"
 			],
 			"file": {
+				"/etc/banip/*": [
+					"read"
+				],
 				"/var/run/banIP/banIP.runtime.json": [
 					"read"
 				],
+				"/var/run/banIP/banIP.search": [
+					"read"
+				],
+				"/var/run/banIP/banIP.report": [
+					"read"
+				],
 				"/usr/sbin/nft -tj list sets": [
 					"exec"
 				],