"add" permission for attributes (to distinguish from "update") [folded]