Currently the administrator can remove attachments on the profile page of any user. Doing so causes a Nullpointer Exception:

java.lang.NullPointerException
at com.atlassian.confluence.pages.DefaultAttachmentManager.removeAttachmentFromServer(DefaultAttachmentManager.java:90)
at com.atlassian.confluence.pages.DelegatorAttachmentManager.removeAttachmentFromServer(DelegatorAttachmentManager.java:65)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)