boolean isUserMod = dao.checkMod(Integer.parseInt(paForm.getFid()),
user);
// check user access rights
getServlet().log("check user access rights ");
if (isUserMod) {
dao.removeAttachment(Integer.parseInt(paForm.getId()));
} else {
return (mapping.findForward(IConst.TOKEN.DENIED));
}
} catch (NumberFormatException e) {