How to restrict Supplier attachments from users with specific roles?

Summary:

How to restrict Supplier attachments from users with specific roles - we need to put attachments in read only mode for some users when they search for suppliers. They should be able to see but not download

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):