The biggest problem is that currently the version 4.1.x is the group permissions do not work with pictures, you can not establish that groups can view or download the attachment images as by default anyone can access them.

This is a mistake that must be solved as soon as possible since many communities are not upgrade to 4.1 because of this.

I'll move this to Feedback as its a suggestion.

any solution?