Or how about: `allows_attachments? && published?` and then get rid of the `if allows_attachments?` in the `attachment_passwed_virus_scan!` method. That would make more sense.