Attachments blank page

[test3445]

Hello , I have a multi row variable set in which I have single text box, a select box, a date variable and an attachment variable. When the non admin try to download the attachment they see a blank page , but as an admin the attachment is automatically download. Any tips?

[Bhimashankar H · Accepted solution]

Hey @test3445 ,

To Ensure non-admin users can view/download MRVS attachments securely and seamlessly. Lets see where the attachments are stored. 

Attachments inside MRVS records are:

• Stored on table: sc_item_option_mtom

• Related to table: sc_item_option

• Attachments are linked to these records, not directly to the request item (sc_req_item)

• ACL (Access Control) restrictions on these tables can prevent access for non-admin users.

Option 1: Add Read Access to Attachment Table

You need to create or modify ACLs so non-admin users can access attachments on sc_item_option_mtom.

Create a new ACL (if missing)

• Table: sys_attachment

• Parent table: unchecked

• Field: empty

• Operation: read

// Allow access if user is the requester or within the same request
var requestGR = new GlideRecord('sc_req_item'); 
requestGR.addQuery('sys_id', current.table_sys_id);
requestGR.query();

if (requestGR.next()) {
    if (requestGR.requested_for == gs.getUserID() || requestGR.requested_by == gs.getUserID()) {
        answer = true;
    }
}

answer = false;

Or broaden it based on your table (e.g., sc_item_option_mtom) if those are the records your attachments live on:

if (current.table_name == 'sc_item_option_mtom') {
    answer = true; // Or apply custom logic
}

Option 2: Move attachments from MVRS to Requested Item (RITM)

Instead of keeping attachments inside the MRVS rows (hard to control), consider copying them to the main sc_req_item record during submission using GlideSysAttachment APIs.

Thanks,
Bhimashankar H

-------------------------------------------------------------------------------------------------
If my response points you in the right directions, please consider marking it as 'Helpful'. &'Correct'. Thanks!

[test3445]

@Bhimashankar H Thank you for your detailed response, does it make a difference if it is a record producer that we are talking about ? thanks 

[Bhimashankar H]

Hey @test3445 ,

Glad you found my response useful. Please consider marking as 'Helpful', so future readers can find easily!.

Yes — the use of Record Producer + MRVS changes how attachments are stored, and non-admin users lose access unless ACLs are modified.

Attachments are on sc_item_option_mtom and not inherently shared with the parent request.

To Solve create ACL to grant access or copy MVRS attachment to RITM attachments.

Thanks,
Bhimashankar H

----------------------------------------------------------------------------------------
If my answer helps you or resolves your query, please consider marking as 'Accept As Solution'. & 'Correct'. So future readers with similar questions can find it easily. Your coordination will help community to grow stronger!.
----------------------------------------------------------------------------------------

[Bhimashankar H]

Hey @test3445 ,

Can you mark my answer as correct, helpful if you were able to achieve the requirement. This helps in removing this question from unanswered list and helps users to learn from your thread. Future readers with similar kind of question will easily find out. Thanks in advance!

Regards,
Bhimashankar H