Record Specific ACL on Attachment

[Mathieu8]

Hi Community,

I have a custom table with records that I want to store a pdf of a legal document that has information that should only be read by a specific administrative group and the user which has signed the document.

Is there anyway to do this with ACLs on the custom table without making modifications to the sys_attachment and sys_attachment_doc tables?

Thanks,

-Mathieu

[hvrdhn88]

Kindly refer the thread below hope it will help you.

https://community.servicenow.com/community?id=community_question&sys_id=7b44cf29dbd8dbc01dcaf3231f96...

[Mathieu8]

That post is only regarding visibility. It does not provide any security.

[hvrdhn88]

then you must have to make some changes in sys_attachment table ACL

[vinothkumar]

I tried the same for HR case,  in the Read ACL for sys_attachment. Can you try something like this. 

    //Check HR Case if user created attachment

  if(current.table_name == 'hr_case'){

          if(gs.hasRole('hr_basic')){

                     return true;

          }

        else{

            return false;

          }

  }