If I were to write my own upload servlet, how would I remove access to the default file upload? Would that be done with user permissions?

We have a requirement to restrict file uploads in DAM by a maximum file size and white list of valid file types. I cannot find any Adobe documentation regarding this subject. Is there a configuration that can control these parameters? If not, what would need to be done to restrict DAM uploads by the...