Also use the specified access rights in the open_token request.
Attach a file by drag & drop or click to upload
