Hide the attachments' thumbnail to users without access

Currently, if a user previously had access to an attachment, specifically an image, and later that access is revoked, they can still view the thumbnail. This is particularly problematic for images, as the content can still be seen in the thumbnail.