document upload attachment and HTTP 403 forbidden