Admin‑only authoring via /admin. Visitors can read and download attachments.