Check attachment permissions