Given a tracker in a public project with a file field having the following permissions :
- all_users: Read only
- registered_users: can submit
- project_members: can update
Then a project member can add a file using the modal. However, a regular user not member cannot add a file at artifact creation using the modal (it works as expected in the artifact UI).