No it isn't a setting you can control, an admin has to do it. I don't know what version of xenforo this is running vs the board I admin, but there is a setting under user groups for Direct Message Permissions and they would need to set it to YES for "upload attachments to direct messages" I think.