Restrict view of attachments

Maria DeLaCruz · ‎03-06-2015

Hi,

Need some help on restricting visibility of attachments. For the Self-Service view of an incident, we would like an ESS user to be able to see only attachments they've added themselves to their incident, but not the ones that others (like ITIL users) have added. But, the ITIL users should be able to see all attachments to incidents. Any suggestions on how we can do this?

Thanks,
Maria

edwin_munoz · ‎03-06-2015

I'm not completely sure that this will work but I think it is a good starting point

Create a business rule with the following information:

Name: Hide attachments to ESS users

Active: True

Advanced: True

Table: sys_attachment (Attachments)

Condition: !gs.hasRole("itil") && gs.getSession().isInteractive()

Script:

hideAttachments();




function hideAttachments(){


         var answer = 'sys_created_by=' + gs.getUserName();


         current.addEncodedQuery(answer);


}

EDIT: I just tested this, it works. Only problem is that users that doesn't have itil role will not be able to see attachment from others in the whole instance. Is this a problem? I'll think on how to fix this.

View solution in original post

Brian Lancaster · ‎04-04-2018

I found a another post that stats current is not available to query business rules. I'm trying to figure out how to do this only on the incident table. I found another post && (gr.getTableName() != 'kb_knowledge') but it seems that Service Portal does not like it as it stops working.