Currently, permissions for uploaded attachments can be controlled via notes. No permissions can be set at all for attachments that are received via e-mail. Since some contacts have to be visible to many employees, but certain sensitive attachments are not intended for everyone, this is very unsatisfactory.
Suggestion:
Assign permissions separately to attachments, regardless of whether they are uploaded or received by e-mail.