Only "user action" methods needs a security declaration.
Attach a file by drag & drop or click to upload
