How to add sql to Attachment Functions to restrict access based on record status

I need to restrict the ability to insert/update/delete attachments based on the status of a record. This is easily done on the Attachment Functions form if you only need to check for one value. However, in my case I need to check for multiple status values. I'm trying to use sql to do this but it is not working. The sql I am using does not error and returns the correct rows in sql*plus, however it does not properly prevent updates on the attachments form. Please advise how to use the Attachment Functions form using the sql statement to make this work.