Attachment access control

[waseem5]

Hi All,

I want to implement access control to attachments. While adding an attachment, I need an option to mark it as External Visible = true/false.

And only if "true" certain users with some role should be able to see and download the attachment included in a record.

Have seen thru basics of attachment on wiki but did not get a direction.

Any help is appreciated.

Thanks

Waseem

[Thijs Daemen · Accepted solution]

Hi Waseem,

You could customise this by making modifications to the attachment ui page. Next to that you will need some modifications to the access control rules on the sys_attachment table.

You could make it similar to the encryption context for attachments. Or you could even use encryption contexts for attachments, since this will virtually do what you want based on roles (a role is linked to a encryption context).

Encryption Support - ServiceNow Wikihttp://wiki.servicenow.com/index.php?title=Encryption_Support#gsc.tab=0

[waseem5]

Thanks Thijs!

The link you shared solved my problem. Also discovered impersonating does not help in testing as Encryption Context is set per session

Best Regards

Waseem

[Alexandre Gava1]

About Attachment Encryption

- Is it always available? If not, what are the conditions to be available

- When does it make sense to use it?

- What is the difference between an encrypted and an unencrypted file in ServiceNow?

[Alexandre Gava1]

@Thijs Daemen 

About Attachment Encryption

- Is it always available? If not, what are the conditions to be available

- When does it make sense to use it?

- What is the difference between an encrypted and an unencrypted file in ServiceNow?