validation on upload file
validation on attached file and role