ACL controls for Attachments on same record

[DenMagnuson1]

We have an odd ask for our HR Service Management project with regards to attachments and wondering if anyone has a creative idea.

The ask is to have attachments on a case record that the user can upload and see, while having the case worker also upload attachments but keep those not visible to the user.

Thought is around the sys_attachment table and any creative ACL that would let users see the attachments they uploaded but not ones uploaded by others.

Talk amoungst yourselves and let me know if you think there's something that might work for this ask.

Thanks,

Dennis

[saritha9]

Creating ACL on sys_attachment table should work

[DenMagnuson1 · Accepted solution]

So I added the following code in the Read ACL for sys_attachment, in the function getAttachmentReadAnswer() just above the 'Remove Prefix' comments.

    //Check HR Case if user created attachment

  if(current.table_name == 'hr_case'){

          if(current.sys_created_by == gs.getUserName() || gs.hasRole('hr_basic')){

                      return true;

          }

        else{

            return false;

          }

  }

Work exactly as expected (hoped).