Rafael Batistot
Kilo Patron

Hi @Sirri 

 

Attachments are stored in the sys_attachment table, not directly in incident.

Check if there are custom ACLs that restrict read access when users are logged in directly.

Sometimes impersonation bypasses certain client-side conditions, so the difference could come from that

 

Check if the users have read access on sys_attachment (System Security → Access Control → Table [sys_attachment]).

 

If this response was helpful, please mark it as Helpful and, if applicable, as Correct.
This helps other users find accurate and useful information more easily