I just had a look at the Trust Level Permissions Table (inc Moderator Roles) seems the setting is newuser max attachments
newuser max attachments