Using the upload (attach) with permission mismatch (deny view, allow change) does the upload but erase the topic ...
The content of the topic will be the error message from the needed view and the new attachment. There should be a test against view too not only against change in /bin/upload.