This attribute Letter is of type DOCUMENT .. Whenver it is created, along with it 3 additional options (upload, view, delete) get added by default .. There seems to be no way to get rid of these options.. The same applies to Picture type attributes as well... As far as i am concerned , Access control rules cannot be defined for those additional options for these type of attributes..