Upload project area attachments does not depends on roles/permissions?

Hi Team,

I am trying to upload the attachments to the project area via RTC API.

I have observed that in that project area I don't have the roles/permissions which is needed for "save Attachment" in project area and workitem. (I am not admin as well)

Even without those permissions I can able to upload the attachments via code.

So my assumption was for uploading attachments user doesn't need any specific roles/permissions.

Is this correct? or am I missing something?

Please let me know.

Thanks in advance.