Comment 3 for bug 48771

It seems that currently this allows any logged in users to delete any attachments. I think this should be restricted to allowing any logged in user to delete their own attachments, or any member of the Launchpad Admins team to delete any attachment.