Hiding specific attachments?

[othews]

Hi,

Is there any way to hide specific attachments or only show specific attachments to end users? 

We enable end users to look at their incidents and Requested Items throught the ess view in Servicenow. We do not use the portal solution yet due to various reasons and  we will not be doing so for at least a year. 
We need to be able to hide specific attachments or only show specific attachments for our end users. Currently they see all of the attachments in their ticket and the attachments that we receive from partners or from assignment groups might contain sensitive information. We do not utilize incident tasks or Catalog tasks in our system. If we did we could of course keep sensitive attachments in the tasks and not on the main incident/RITM. But we dont.

However, we still need to show some attachments to the end users. For example guides or just showing them the documents that they've uploaded themselves.

Is there for example a way to create a new field where you place only certain attachments? Is there any way for Servicenow to recognize different upload sources for attachments? 
Is there any way at all for us to solve this?

Best regards
Ola Thews

[Chalan B L]

Hello Ola,

Even we had a similar requirement and implemented this in related list where we are restricting the related list.

Please let me know if you need coding and steps to accomplish this.

Regards,

Chalan

[othews]

Hi, 

That sounds exactly like what we are looking for.

If possible i'd be grateful for a short explanation on how you were able to achieve this!

BR

Ola

[Chalan B L · Accepted solution]

Hello Othews,

1) Create an custom table "u_internal_attachments" and add two fields "Attachment" & DP Reference(reference to parent table.

2) Create a related list - select a view and give a related list

3) Create an UI action "Create new internal attachment"

check the List banner input and list action

Condition : current.canCreate() && !RP.getListControl().isOmitNewButton() && RP.isRelatedList()

Script:

function CreateNewInternalAttachment() {
try{

var uri = action.getGlideURI();
var path = uri.getFileFromPath() + '';
path = path.substring(0, path.length- 5) + '.do';
uri.set('sys_id', '-1');
var mainCaseSysID = uri.get('sysparm_collectionID');

var mainCaseDPIR = new GlideRecord('parent table');
mainCaseDPIR.get('sys_id', mainCaseSysID);

var params = 'sysparm_DPIRmaincaseSysID=' + mainCaseDPIR.sys_id + '&';
params += 'sysparm_fromMainCase=true';

var url = 'u_internal_attachments.do?sys_id=-1';
action.setRedirectURL(url + '&' + params);
action.setReturnURL(mainCaseDPIR);

}

catch (e){
gs.addErrorMessage('>>>UI Action ERROR: ' + e);
}

}

CreateNewInternalAttachment();

--------------------------------------------------------------------------

4)Hide the save button for this table since only "Submit" button should be visible - create a save action

5) Give the specific access by using ACLs

6) Write the BR to check whether attachment is made

(function executeRule(current, previous /*null when async*/) {

try{
var currentsysid = current.sys_id;

var attach = new GlideRecord('sys_attachment');
attach.addQuery('table_sys_id', currentsysid);
attach.query();

//Gliding current Table to create NEW records for Each Attachments.
var gr = new GlideRecord("u_internal_attachments");
var count = 1;

while(attach.next()){
//If only one Attachment attached.
if(count == 1){
current.u_attachment_reference = attach.sys_id;
}

//If more than one Attachment attached
else{
gr.initialize();
gr.u_dp_reference = current.u_dp_reference; //Check out the fields here
gr.u_attachment_reference = attach.sys_id;
gr.insert();

attach.table_sys_id = gr.sys_id;
attach.update();

}
count++;
}
gs.setRedirect('u_aero.do?sys_id='+current.u_dp_reference.sys_id); // after attachment is made basically it returns to the parent id

}

catch (e){
gs.log(">>>'Business Rule - DPInternalAttach - Populate Attachment : " + e + ' - ' + e.message, ">>>Business Rule<<<");
}

})(current, previous);

7) Write Client script - onLoad

function getParmVal(name) {
name = name.replace(/[\[]/,"\\\[").replace(/[\]]/,"\\\]");
var regexS = "[\\?&]"+name+"=([^&#]*)";
var regex = new RegExp(regexS);
var results = regex.exec(window.location.href);
if(results == null) {
return "";
}
else {
return unescape(results[1]);
}
}

function onLoad() {
try {

var fromMainCase = getParmVal('sysparm_fromMainCase') == 'true';

if (fromMainCase) {
var DPIRmaincaseSysID = getParmVal('sysparm_DPIRmaincaseSysID');

g_form.addInfoMessage('Please upload at least one attachment to proceed.');

g_form.setValue('u_dp_reference', DPIRmaincaseSysID);

}
else{
g_form.disableAttachments();
}
}

catch(e) {
//alert('Client Script --DPInternalAttachment-OnLoad-- ERROR: ' + e);
}
}

---------------------------------------------------------------------------

😎 write one onSubmit client script and call script include.

function onSubmit() {
try {

var glideAjax = new GlideAjax("DynamicAjaxQuery");
glideAjax.addParam('sysparm_name', 'queryMultipleResults_EncodedQuery');
glideAjax.addParam('sysparm_table', 'sys_attachment');
glideAjax.addParam('sysparm_encodedQuery', 'table_name=u_dp_internal_attachments^table_sys_id=' + g_form.getUniqueValue());
glideAjax.addParam('sysparm_returnField', 'file_name');
glideAjax.getXMLWait();
var response = glideAjax.getAnswer();
var attachmentCount = response == '' ? 0 : response.toString().split('|').length;
if (attachmentCount === 0) {
alert('No attachment(s) found. Please upload at least one attachment to proceed.');
return false;
}
}
catch (e) {
alert('>>>Unhandled client exception -- DPInterAttach-OnSubmit- CheckAttachment --: ' + e);
}
}

--------------------------------

queryMultipleResults_EncodedQuery : function () {
try {
var response = '';
var table = this.getParameter('sysparm_table');
var encodedQuery = this.getParameter('sysparm_encodedQuery');
var returnField = this.getParameter('sysparm_returnField');
var displayValue = this.getParameter('sysparm_displayValue') == 'true' ? true : false;

var gr = new GlideRecord(table);
gr.addEncodedQuery(encodedQuery);
gr.query();

while (gr.next()) {
response += (displayValue ? gr[returnField].getDisplayValue().toString() : gr[returnField].toString());
response += (gr.hasNext() ? '|' : '');
}

gs.log("Invocation DynamicAjaxQuery.queryMultipleResults_EncodedQuery() param {table:" + table + ", encodedQuery:" + encodedQuery + ", returnField:" + returnField + "} response: " + response, ">>>Script Include<<<");
return response;
}
catch (e) {
gs.log("'DynamicAjaxQuery' ERROR: " + e + ' - ' + e.message, ">>>Script Include<<<");
}
},

------------------------------------------------------------------

1) Refer the 1st screenshot in my 1st reply ..thats how it looks in related list

2) in form view and if you try to submit then it throws an alert as in client script

[Chalan B L]

This can be made generic to the tables whichever tables extend task table.

Mark correct if this answer helped and this helps me to motivate more to share my knowledge.

Thanks,

Chalan