Use hibernate access control in attachment workflow

fix ownership setting error

ARMSTWO-19