How to create role "AP read only" without access to open attachments in invoices?

We've been working with the following Oracle Note:

Payables Invoice Inquiry (Read-Only custom role) (Doc ID 2360565.1)

And following the steps, the new role created still allows us to open attachments, which we don't want. We don't want the user to be able to open attachments.