#2331667 err on the side of tight permissions rather than loose permissions
#231667 add attach fields action to save