show attachments to user