because it is a generic tool and security configuration should be done by API.
Attach a file by drag & drop or click to upload
