At the moment user can create Poll, wait for some votes and edit poll items (and change poll result).
I suppose ACL should include few extra:
1) allow to edit poll items (values) for own poll
2) allow to delete poll items (values) for own poll
3) allow to edit poll title for own poll
Attachments can only be downloaded by logged in users