### Problem to solve As a CS engineer, I need I way to securely delete attachments from projects without using the Rails console. ### Proposal Create 2 API endpoints: 1. Get attachment 2. Delete attachment In order to delete an attachment the user must provide the direct link to the attachment and the unique ID (and the project ID) Create an API to remove an attachment scoped to an Owner, that would completely eliminate the need for us to intervene via the console. **Or** admin-only API endpoint would do: that would let us add a feature to ChatOps or use *only* admin access (which is technically a lesser level ### Recent examples * https://gitlab.com/gitlab-com/support/internal-requests/-/issues/11665#note_773486715 / https://gitlab.zendesk.com/agent/tickets/256477 When users write in, the usually provide a direct link to the attachment which includes the unique ID we can use to remove it. ### Note We will need to add a follow up issue to this to add an audit event for this