a good question...
in the admin you can set which users (author, publisher.. even admin, superadmin..) to allow to use frontend admin, so not anyone can add objects... and if it weren't enought you can set that the admin has to approve uploaded objects before those get published... so to answer to your question... i absuletely don't know
but the solution is here... so i don't care
