DRF Serializer - Accept field but don't use it in `create` or `update`
You should handle this behavior in serializer.save method, for example, you can pop it from validated_data like that:
def save(self, **kwargs):
self.validated_data.pop("attachment_filename")
return super().save(**kwargs)