You can do both with usergroups and promotions. Make the basic usergroup not allowed to do attachments or post in forum Y, create a new usergroup that gives permission to do attachments and post in forum Y, and then create a promotion that adds this group as a secondary usergroup once a user has XX posts.
edit: Just saw this mod bumped -
Can't download attachment Before x post