Hi,
you can try to use before update BR on sys_attachment and check if the logged in user is the created by of that sys_attachment
For Remove/Delete ensure you have correct table level DELETE ACL
Actually both your requirements can be handled via before update/delete business rule
BR: sys_attachment
Before Update AND Delete
Condition: current.table_name == 'incident'
Script:
(function executeRule(current, previous /*null when async*/) {
// Add your code here
if(gs.getUserName() != current.sys_created_by){
gs.addErrorMessage("You are not allowed to update/delete the file as you are not the one who attached it");
current.setAbortAction(true);
}
})(current, previous);
regards
Ankur
Regards,
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader
