Freelancer
Member
Unregistered User was able to upload an attachment to a ticket reply, even if the permissions say it is not allowed. I think maybe it's because it was a reply. But this should be strict. I do not want unregistered users to be able to upload attachments at all for security reasons.