How to restrict attachments download to users

[Kalyan520]

Hi,

I want to restrict download of attachments on a particular table for all users except admins.

I have created read acl on attachment table but it did not work.

Any ideas?

Thanks,

Kalyan.

[Sandeep Rajput]

@Kalyan520 Could you please share the snapshot of your read ACL. Also, did you check if any other ACL on sys_attachment table is granting access to the user? You can use Access Analyser to check which ACLs are granting the access to user.

[Jerzy]

Hi Kalyan,

Read ACL on the sys_attachment would be my first guess, have you tried blocking read access to the sys_attachment_doc table?
How you are accessing the file? From the attachment bar on the record, from the activities, directly from the attachment table?
Are you sure that there are no other ACLs on that table that are granting access?

Regards,
Jerr-Z

[Jerzy]

Read ACL for the sys_attachment table is the correct way of solving this:
https://www.servicenow.com/community/developer-forum/how-to-restrict-users-to-download-attachments/m...

[Ankur Bawiskar]

@Kalyan520 

why to show the attachments then to those users if you are not allowing them to download?

If my response helped please mark it correct and close the thread so that it benefits future readers.