This appears to be something I need to work out with the hosting company. In the meantime, I've found a workaround to obtain file information from the file's temporary location on the server, i.e. by using fileOpen(), which does not throw a permissions error, allowing me to read file-related information and perform a file size check before uploading the file to its final destination via <cffile="upload">.