Added authorization for API show attachment endpoint
Merge pull request #1576 from opf/feature/api-attachments-show-permissions

Added authorization for API show attachment endpoint