I just had a look at the Trust Level Permissions Reference seems the setting is newuser max attachments
newuser max attachments