if 'user_name' is the current user and it is not root.
Attach a file by drag & drop or click to upload
