AttachmentController checkPermission issue

[Lucisu]

Describe the bug
Hello! While checking the code of the AuthenticationController class, I noticed that the checkPermission call does not actually aborts if the user is unauthenticated:

platform/src/Platform/Http/Controllers/Controller.php

Line 29 in da3f6f4

abort_if(Auth::user() !== null && ! Auth::user()->hasAccess($permission), 403);

It is later aborted in a different middleware, but I guess it would also make more sense to add this check in the AttachmentController too, right?