I need to create a download link for the Service Portal. The file is an Excel spreadsheet. I created the link in the Portal using the 'rich text label' variable, then added the link '/sys_attachment.do?sys_id='SYS_ID_FROM_SYS_ATTACHMENT' to this variable.
To make the file available in the attachments table, I created a system property and attached the file to it.
The download link works, however, only for those with the 'admin' role. I don't have the 'security_admin' role to add a new role to the 'read' ACLs of the sys_attachment.
The functionality should be made available to 2 specific groups. Any ideas?"
Hi! Since you attached the file to the sys_properties table, the ACL is checking if the user has read access to the sys_property record. One possible solution could be to create a custom role and add it to the groups that can access the attachment. Then in your system property grant read access to the custom role.
According to the AttachmentSecurity script include (sys_script_include.do?sys_id=ffbb141c471103007a977eaecb9a712e), this should grant access to the user (with the custom role) to the attachment.
Another solution could be to navigate to the sys_attachment table, find the record and then via list edit clear the table_name. This will grant everyone access to the attachment. Then your widget could have the condition to render the link only for the users in the said groups.
Hi! Since you attached the file to the sys_properties table, the ACL is checking if the user has read access to the sys_property record. One possible solution could be to create a custom role and add it to the groups that can access the attachment. Then in your system property grant read access to the custom role.
According to the AttachmentSecurity script include (sys_script_include.do?sys_id=ffbb141c471103007a977eaecb9a712e), this should grant access to the user (with the custom role) to the attachment.
Another solution could be to navigate to the sys_attachment table, find the record and then via list edit clear the table_name. This will grant everyone access to the attachment. Then your widget could have the condition to render the link only for the users in the said groups.
