Attachment permission?

We are running v12; P18.  I would like users to be able to add attachments (under paperclip; like a text note) to an existing record (like sales orders; GESSOH) but what X3 rights are associated with this ability (to add an attachment)?  I assume the users need modify rights to GESSOH?  I do not want to give these users modify rights so if this is the answer; if anyone has a workaround - please advise.  Thanks in advance!