Security on attachments in invoice data

It would be better in terms of internal control if user can set security on invoice attachments handling depending on its status. There is no control for the attachments now and users, who can access to an invoice, are able to add and delete attachment even the invoice status is approved or posted.