Currently, to allow users / project leads etc. to delete attachments, you have to give them the delete issue permission (even in Enterprise version.
Deleting attachments is not a big deal, as doing so leaves an audit trail (in Change History).
However this permission also allows deleting issues completely which removes any audit trail.
An alternate would be to make "delete issue" be a logical delete - ie: flag in the database rather than physically deleting.