Hi,
Regarding the topic above, we have the following requirements and are considering implementation.
However, by implementing this, we are concerned that users may not be able to freely remove confidential files if they accidentally upload them, or that automatically generated files or files with the same name that shouldn’t be an issue might get blocked.
1. Currently, applicants and task workers can remove files, which could lead to tampering with requests. Also, after deletion, no one other than the user who removed the file can know what was removed.
:We want to control file name edits and deletions by adjusting ACLs and the My Request widget so that users cannot modify them.
2. Since attachments with the same file name are allowed, it’s hard to tell which one is the most recent.
:We want to control this by adding business rules or the like to the sys_attachment table so attachments with duplicate file names cannot be uploaded.
Please give advice on what design approach we should take for attachments from portal users (without Fulfiller Roles).
Best Regards,
