Use `Project.public_or_visible_to_user` instead of `current_user.authorized_projects`
Attach a file by drag & drop or click to upload
