GRANT ROLE can update db-level privileges -> must invalidate acl_cache
Attach a file by drag & drop or click to upload
