attachments is owned by person instead of user