Depending upon a user's rights to view certain documents, they may or may not be able to view attachments sent through the system's internal mail. However, by configuring the Backwards Compatibility setting, for internal mail, a user's privileges can be overridden.
Note:
This option is selected by default in the Configuration module.