restrict access to attachments on ritm

[DreDay3000]

I am trying to write an acl to restrict attachments for users who are not a member of 3 different groups. Also is the ritm is not assigned to you as the requester, the attachments should be restricted. Members of the groups should be able to rename, delete and add documents at any time. The requester/user can not delete attachments after submission or approvals

I started with a acl script to restrict but is not working as expected:

if (gs.getUser().isMemberOf('GPC A/BO') && current.cat_item.name == 'Purchase Request') {

    answer = true;

} else {

    answer = false;

}

[DreDay3000]

should I add this code (lines 1-5) to this oob acl?

[DreDay3000]

should I add this to the oob write acl? lines 1-5

[sasi_v]

Hi @DreDay3000 ,

According to the script, it appears that you are configuring ACL on the request item table, but you actually need to configure it on the attachment table.

Regards,

Sasikanth

[DreDay3000]

this is on the sys_attachment table