Fix permissions for GET attachment