because credential_request.submit() is now guarded by Modify portal content permission.
Attach a file by drag & drop or click to upload
