new attachments permission fix
view*/edit* processing callback can return false to block that action