2 respuestas
To expand on that, Notes & Attachments inherit the permissions of the object they are attached to so if you don't want someone deleting/adding/editing attachment records on an opportunity, you need to limit who can edit the opportunity itself.
