Default permissions to public in post attachments validator