ACL not working for manage attachments tab in the top of the form

[FathimuthuB]

The requirement is to make attachments visible only to the members of the assigned group in the ritm table

I have created a read acl to sys_attachment table. 

but it can still bring the attachments and show - How?

[J Siva]

Hi @FathimuthuB 
Create one "Deny Unless" Read ACL on like below on the sys_atachment table.
Deny Unless ACL:

Note: Change the table name as required. I've used "Incident" table for testing.

var table = current.table_name;

var inc = new GlideRecord(table);
inc.get(current.table_sys_id);
var assignmentGroup = inc.getDisplayValue('assignment_group');
if (gs.getUser().isMemberOf(assignmentGroup)) {
    answer = true;
} else {
    answer = false;
}

Hope this hlps.
Regards,
Siva

[Ankur Bawiskar]

@FathimuthuB 

did you verify logs in that script?

If my response helped please mark it correct and close the thread so that it benefits future readers.