Issue Viewing Encrypted Attachments

[tstocking]

I have a user that has an associated role with an encryption context.   The user then creates a new record and attaches a file to the record and selects "Encrypt".   The record is then saved.   When the record is opened back up, and the attachment is clicked on, it comes up in an unreadable (encrypted) format.   Am I missing something with encryption?   Shouldn't the attachment be readable for the user with an associated encryption context?

[bernyalvarado]

Hi Todd,

here goes some thoughts:

a) Make sure that you user is using the right encryption context (in case you have more than one)

b) Make sure you're not impersonating the user while testing any encryption scenario

c) try encrypting for that user a new attachment and try to see if you get the same result. Make sure you follow the encryption steps as specified in the wiki:

4.1 Using Attachment Encryption  

Log in as a user with at least one encryption context. 
If more than one encryption context is available, select the encryption context for this session from the selector. 
Navigate to a form which needs an attachment added, such as the Incident or Problem form, and click the attachment icon to open the Attachments dialog box. 
Select the file to be attached.
Only users with one or more encryption contexts see the Encrypt file check box below the file name. 
Select the Encrypt file check box.
Users with more than one encryption context are asked to confirm the encryption context. If you select a different encryption context, the encryption context selector updates to reflect the change. 
Click Attach to upload the file attachment.
The file appears in the Current file attachments section of the form with a special icon indicating that it is encrypted. Pointing to the icon shows the name of the encryption context. 
Click Done.
Attached files are listed across the top of the form. A special icon identifies encrypted files. Note that you can only see the encrypted files for which you have the encryption context.

I have a hunch that your user may have used a different encryption context at the time of saving the record and that's why the user cannot see the attachment now.

Thanks,

Berny

[tstocking]

Thanks for responding Berny.   The user only has one role and the role is associated with only one Encryption Context.   The user can read and write to an encrypted text field and upload attachments but not view them in an unencrypted format.   I am using a developer instance of the Geneva release.

[tstocking]

Seems to be working correctly in another demo instance.     Perhaps there is an issue with the developer instance.