Use current_user_can() to determine whether to show Delete buttons in attachment list