Create new PathLockPolicy and use it instead of permission on project
Attach a file by drag & drop or click to upload