Normal users able to attach files to closed tickets

Closing a ticket should make it read only for normal users, yet those are still able to attach files to closed tickets.

Example: MC-50572 trolls infested that ticket with random .exes eventhough it has been closed.