The API allows the user to change the content of an attachment, which is a bad thing in many different use cases, like:
* changing a patch: Changing a patch after the old version has already been tested is a bad thing, all sofar test are invalid
* changing files which help in the debugging process (like stacktraces, coredumps, etc.): this makes the bug triaging progress harder, nobody knows if the attached files really reflect the issue or are manipulated.
In my opinion the ability of deleting attachments is enough, but allowing the user to change the content of an attachment is bad.
If you would like to provide this ability, please add a kind of changelog to each attachment or at least indicate changes in the web UI like: "this attachment has been changed on xxxxx by yyyyyy"
Markus
