One way to do that is to keep track of the user_id of the person uploading inside acs_objects. The ip address of the person can also be seen in acs_objects table.
I think you can also use ad_maybe_redirect_for_registration to force the user to register first so no anonymous user can upload.