Specs for user and attachment controller