File is a top-level module document, like PDF, Text Document etc, so it should have its own security definition and should not acquire local roles.

For cases where files are embedded as sub documents, we are using Embedded File, which acquire local roles.