Disable attachment remove option for non admins on a custom table

[Balaraju K B]

Hi Everyone,

I have a requirement to "disable/make it read only" the 'remove' option for Custom table please refer the below screenshot.

And I tried creating the Delete ACL on sys_attachment table with condition as "table name is <custom table name>" and script as if(gs.getUser().hasRole('admin')){

answer = true;

}else{

answer = false;

}

But still not working Is there anything I should update for this in order to work.

Thanks in Advance,

Bala

[Ankur Bawiskar · Accepted solution]

@Balaraju K B 

Did you debug the security rules from left nav?

[Tushar]

Hi @Balaraju K B ,

I think the condition field in an ACL should be a GlideFilter or a standard query that evaluates to true or false.

Using "table name is <custom table name>" directly as the condition will not work.

condition -

current.table_name == 'custom_table_name' && !gs.hasRole('admin')

script can be something like this -

answer = current.table_name != 'custom_table_name' || gs.hasRole('admin');

Please, don't forget to mark my answer as correct if it solves your issue or mark it as helpful if it is relevant for you!

Regards,
Tushar

[Balaraju K B]

@Tushar    We cannot use current.table_name in the condition as its a dropdown filter.

Thank you for the reply,

Bala

[Balaraju K B]

@Ankur Bawiskar Any solution for this to restrict the Deletion of the attachment for non admins on a specific table?

[Ankur Bawiskar]

@Balaraju K B 

if the user has write access to your table then user can add/remove the attachment

Why not use before delete BR on sys_attachment table then?