Here's a 3-minute shortcut. Although it would be nice to have a config setting, it's not strictly necessary. If you're okay with the default (for now) being that all users can see their own uploads, this can be implemented with two tweaks to a stored procedure and one tweak in code:

In file 03.*.*.SqlDataProvider,

edit procedure {databaseOwner}{objectQualifier}grmGetRepositoryObjects as follows:

add parameter

@UserName nvarchar(150),

and, in both WHERE clauses (within both the IF and the ELSE structures),
replace

AND (a.Approved = @Approved)

with

AND (a.Approved = @Approved OR a.CreatedByUser = @UserName)

Finally, in the code-behind simply modify the call(s) to this stored procedure to pass the appropriate value for @UserName, and you're done.

This is the only thing keeping the repository from being fully functional for my needs, so if you could sneak it into the next release I'd be a very happy man.  Ordinarily I'd just grab the source and do this myself, but I'm hosted on Go Daddy and I let them install DNN for me, so I can't get under the hood.  (And I'm still on VS.NET 2003, so I'm kinda locked into framework 1.1).

Either way, thanks very much for your time and consideration, and nice job on a very useful module.

-Bill