Add in missing privilege checks. Tests for the privileges.
Attach a file by drag & drop or click to upload
