Record Specific ACL on Attachment
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-21-2018 09:34 AM
Hi Community,
I have a custom table with records that I want to store a pdf of a legal document that has information that should only be read by a specific administrative group and the user which has signed the document.
Is there anyway to do this with ACLs on the custom table without making modifications to the sys_attachment and sys_attachment_doc tables?
Thanks,
-Mathieu
- Labels:
-
Best Practices
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-21-2018 10:01 AM
Thanks vinothkumar.
I'm sure something like this will work great. I was just hoping to not touch sys_attachment since the solution isn't in line with how access is controlled on other fields.
For anyone taking this approach, it's difficult but you could still get the attachment via sys_attachment_doc. So you will need similar ACLs on that table.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-21-2018 10:08 AM
the reason is here
//Copied content
Any attachment you save in the system is broken up into 3k chunks.Those chunks are then base64 encoded, producing 4k strings.Those strings are then written out as sequential rows in sys_attachment_doc
There's one "master" entry in sys_attachment describing the file name, file type and whatnot, which, in turn, is associated with a record in the database like "incident INC10002".
The various entries in sys_attachment_doc then relate back to that entry in sys_attachment.