Is it possible to restrict access to attachments to prevent people from (accidentially or intentionally) removing attachments
There is no specific action permission for attachments. You could remove the ability for that user role to edit the type of resource that has the attachments.
