Add forgotten permission (canUploadAttachment)