Is there a way to restrict read access ocertain attachments on a certain requested item/order guide?

[simran3]

I have some high security attachments that need to be attached and approved for an onboarding process. I know there's a way to restrict attachments to certain roles - but I don't want mine to be the whole attachment table. I want it to be only those attachments on that requested item. Is this possible?

[Soni Tushar]

Hello @simran3 ,

Simpler way to restrict access to high-security attachments on a specific.

Link Attachments to a Specific Field ---

1) Add a Reference Field: Add a custom field to the requested item record, such as u_high_security_attachments, to store references to your high-security attachments.
2) Link Attachments: When uploading high-security attachments, link them to this specific field instead of the default attachments table.
Control Access:
3) Use a UI Policy or Client Script to control the visibility of these attachments based on the user's role or other conditions. This will ensure that only authorized users can view these attachments.

Control Attachment Visibility ---
1) Create a UI Policy: manage the visibility of high-security attachments based on the user’s role or other criteria.
2) Use a Client Script or Business Rule to hide or display attachments based on role-based permissions.

Access Control List (ACL) ---
(current.u_requested_item == gs.getUserID()) || gs.hasRole('security_role')

If you found my response helpful, please consider marking it as "Helpful" or "Accept Solution." Thank you!