File types need permissions too. It wouldn't make sense for admins to be allowed to upload 20 MB files, and also new users to upload 20 MB files. More file space is something that we should be able to grant to trusted groups, without having to disable attachments entirely for less-trusted groups.