Attachment access checks were simplified so the system directly verifies whether the current user is an internal employee, administrator, or superuser. This reduces internal complexity while keeping responsibility for granting attachment access with the relevant business flow or controller.

/cc @ryv-odoo