Just now we can set that a role can not delete a attachment connected to a worker record (Attachments in ESS), but we can not do it with other records, f. e. we can not prevent worker to delete attachment connected to his certificate competency. It would be very useful to be able to set this. A worker can delete this type of attachment also from Sharepoint, even if he has no acces to the folder where it is stored.