Users should only be able to view attachments if they can view the bug that the file is attached to (bug 70189)
r=tara