Currently, when a users is given full authority to add/edit tasks but the user's role is configured to only allow the user to delete items they create, the user is NOT able to delete attachments from tasks. So, I am stuck with either providing users the authority to complete mess up our space by allowing them to delete everything in the space OR requiring admin-type users to delete attachments for users. Personally, I view this is a bug. Someone could not possibly have intentionally tried to make the product work like this.