Log in as a Confluence administrator, click "Confluence Administration"> "Page and Attachment Security Enhancer"> "Configuration", and select "Attachment Download Restrictions".
"Restrict the types of attachments that can be downloaded" switch default: on.
"Restrict the types of attachments that can be downloaded" default: empty (no restriction).
"Allow preview and view of restricted attachments" switch default: on.