The Pega 7 Security Access Manager provides a high-level overview of the ARO Permissions (Access of Role To Object) associations with the different Roles linked with the Access Groups defined for an Application. For more detailed fine tuning of the “Named Privileges” associated with the "Access of Role To Object" (ARO) rules. You can still use the "Security Overview For Role" dialog (what you referred to as the "Role Editor") which is accessible via the "Roles for Access" landing page. The "Role for Access" Landing page is also still available in Pega 7. You can access the "Roles for Access” Landing Page in Pega 7 via the Designer Studio menu (Designer Studio>Org & Security>Tools>Security>Role Names).
You can try using the standard local (optional) action “EditAttachment” (this requires the Named Privilege "ActionEditAttachment"). This optional (local) action does create multiple versions of the same attachment.