Deactivation of work package attachments is circumventing project update service: [https://github.com/opf/openproject/blob/dev/app/controllers/projects\_controller.rb#L94-L96](https://github.com/opf/openproject/blob/dev/app/controllers/projects_controller.rb#L94-L96)

This must be fixed. Begin of the insertion~~Also,End of the insertion Begin of the deletion Also,End of the deletion add the controller action to Begin of the insertionthe~~ `~~authorize~~` ~~before\_action.~~ (This part has already happened beforeEnd of the insertion the Begin of the insertion14.1 release)End of the insertion Begin of the deletion `authorize` before\_action.End of the deletion