I have tried different settings in space admin and page restrictions, also tweaking user and group permissions. It seems that ability to add a page (space admin) also controls whether the Edit in Office link appears for attachments on that page. Has anyone been able to provide editable attachments and at the same time disallow general users from editing the page layout?