In the test case importer, for security reasons, the addition of attachments is limited to Administrator Users only.

Description
A non-administrator and administrator jira users would potentially be able to use Test Case Importer feature to exploit a server-side request forgery.