Setting a role for controlling the attachment functions
How to set a role by which once a change is released, when we go to affected items and open a part, we should be able only to get and view the attachment.
We should not be able to check in ,check out etc.
You can look at the criteria for (let’s call them) standard users and only allow them to VIEW or GET if ITEM is RELEASED. This will allow them to see only the current released attachment.