[FIX] ir_attachment: restrict access to orphan attachments to employees
Merge branch '7.0' of https://github.com/odoo/odoo into 7.0-win32