During enrollment process our community user signs some documents/agreements which are saved as attachments on contact object (community contact representing the current user). And now on community profile page we need to display list of these attachments with the ability to view/download signed documents. Currently we are fighting with "not enough permissions" exception when follow well-known approach to work with attachments, i.e. URLFOR(...)
At the community profile level contact permissions is set as Read/Write. Sharing Settings at the system level is set to Private.
So far I've tried to create contact sharing rules as through Apex (ContactShare), as through web UI to grant edit permission to contact data. Permission has been granted but user still can not download attachments, again "not enough permissions" error.
Is there anything I'm missing here? Why even having edit permission to that specific contact record user can not access attachments linked to it from the community?
Any help would be appreciated. Thanks in advance.