Add access right to view attachments