Operations against 'sys_attachment' table not allowed for scoped applications?

[ericeger]

I have been working on the following process

1. Create a request item with an attachment

2. Create a business rule that create a record on a table in my scoped application, which has a reference to the request item

3. Business rule(after insert) gets the attachments linked to the request item, and duplicates the attachments using the newly created record and its table name.

I get the 3 following errors

Access to api 'put(sys_attachment.table_name)' from scope 'x_mpaii_sharepoint' has been refused due to the api's cross-scope access policy

Access to api 'put(sys_attachment.table_sys_id)' from scope 'x_mpaii_sharepoint' has been refused due to the api's cross-scope access policy

Create operation against 'sys_attachment' from scope 'x_mpaii_sharepoint' has been refused due to the table's cross-scope access policy

What I've done to help is create sys_scope_privilege records for the 'sys_attachment' table on behalf of my scoped application for read/write/create. I've also created table sys_scope_privilege records for write access on the two field names. Additionally, I created two more executable sys_scope_privilege records on the exact name above (put(sys_attachment.table_sys_id)). I've also gone into the sys_attachment table and allowed 'Can Read/Write/Create'. Both tables can be accessed by all application scopes. I'm using an admin id, so ACLs not should be an issue. 

I deactivated my business rule in step 2. I went and re-created the same business rule in the Global application and ran it just like step 3 and works as expected with creating the sys_attachment record. I then deactivated the business rule in the Global application and re-activated the one in the scoped application. I get the same 3 errors noted above.

Is there something else that I might be missing? Are there other sys_scope_privilege records I could try to make?

Thanks

[Brett Ishmael]

I had to modify the application access on the table to allow delete operations from a scoped flow action. In addition to that, I also created an Application Cross-Scope Access record to get it working. Thanks for the comment, it saved me a headache!

[ryanlitwiller]

Any chance you could share the application cross-scope access records. I'm running into the same issue and have tried everything mentioned here. 

[rahulbastawade]

Did you manage to find any workaround?

I have the same issue: ' Error - Write operation against 'sys_attachment' from scope 'sn_hr_core' has been refused due to the table's cross-scope access policy'

[hunterphillips]

Hi Rahul, my response may be helpful.

[hunterphillips]

I found the AttachmentActionsUtil script include to be helpful for copying a single attachment.

var AttachmentUtil = new global.AttachmentActionsUtil();

var inputs = {
  fromObj: attachmentGlideRecord,
  table: <target_table_name>,
  toObj: <target_sys_id>
};

AttachmentUtil.copyAttachments(inputs);

I believe GlideSysAttachment.copy() can be used to copy all attachments from 1 record to another.