Hi, in Blog.php (/library/Borbole/AdminBlogs/AttachmentHandler)
find
protected function _canViewAttachment(array $contentData, array $viewingUser)
{
return ($viewingUser['user_id'] AND XenForo_Permission::hasPermission($viewingUser['permissions'], 'blog', 'viewAttachments'));
}...