VRM: Engagement Read Only Group Permissions - How do I disable "attachment" view

Ali Fattah
Tera Contributor

I am working in a distributed environment and need to onboard business units into the VRM module. I created a read-only group for the engagement table that allows the business units to read the engagement table. I've noticed that by doing this, they can also view attachments that are submitted by suppliers in the vendor portal. 

Can anyone point me in the right direction on how to disable this group's ability to access attachments attached to either the VRA's or located within the Vendor Portal when the user clicks "view responses" in the VRA assessment instance (AINST). 

1 REPLY 1

Community Alums
Not applicable

Hi @Ali Fattah ,

You can either create a ACL on Engagement record for the respectie group OR create a OnLoad Client Script using "     gel('header_attachment').style.display='none';"

Sample Script : 

function onLoad() {
var assignment_group = g_form.getValue('assignment_group');
var isAdmin = g_user.hasRole('admin');
// sys_id is Required group's sys_id
if(!isAdmin && assignment_group=='287ebd7da9fe198100f92cc8d1d2154e'){
var attachment_header = document.getElementById('header_attachment_list');
attachment_header.style.display='none';
}
}