Fix #6417: users with group permission should be able to create groups via API
Attach a file by drag & drop or click to upload
