Attachment security on HR Cases - outside of Evidence on Employee Relations

[Beth Clingenpee]

Our HR Agents are asking for a way to attach documents to any HR cases and have an option to make them not visible to the Subject person. These are cases that are not necessarily Employee Relations cases where the Evidence tab is available, but there may still be times when it would not be appropriate for the Subject person to have access to an attachment added to another type of case.

We do not have "Field Encryption Enterprise", which appears to be required to create a new configuration for the attachment table. I've only explored the "Field Encryption Starter" a little, so I may have missed something there. I'm not sure that the attachments necessarily need to be encrypted - just secured.

Any assistance and suggestions welcome!

[pavani_paluri]

Hi @Beth Clingenpee 

Create a restricted attachment mechanism (either a custom table or ACLs on sys_attachment).
Test with impersonation: impersonate a Subject user to confirm they cannot see or download the restricted files

Mark it helpful if this helps you to understand. Accept solution if this give you the answer you're looking for

Kind Regards,

Pavani P