* fix attachment permissions: