Manage who can attach files on a record/ci

[andersn]

Hi,

Is it possible to restrict what roles are able to add attachments to a record/ci ?

For instance, on Business Service i only want the System Owner to be able to add attachments.

[Chuck Tomasi]

Hi Anders,

You can restrict on a specific table. Are you looking to do this conditionally? For   example, some roles CAN attach while others cannot or do you just want to disable attachments on all cmdb_ci related tables unconditionally?

[andersn]

Yes, conditionally. On cmdb_ci i only want users who have the role "system directory admin" or the user who is system owner to be able to add/delete attachments, while users with "itil" role should be able to see attachments.

[Chuck Tomasi]

Hi Anders,

From your requirements mentioned above, this sounds like an ACL on sys_attachment is your best option.

Using Access Control Rules - ServiceNow Wiki

[Chuck Tomasi]

Hi Anders,

The g_form object in a client script may also be of help. You could write an onLoad client script that checks user's roles and other conditions to use the disableAttachments() method.

GlideForm (g form) - ServiceNow Wiki

Client Scripts - ServiceNow Wiki