Can't attach a file without create permission over the register

Support User
2

Yes this is the design. The resource check the access right of the linked model for the same operation.