How to restrict attachments download to users
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2025 12:18 AM
Hi,
I want to restrict download of attachments on a particular table for all users except admins.
I have created read acl on attachment table but it did not work.
Any ideas?
Thanks,
Kalyan.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2025 12:58 AM
@Kalyan520 Could you please share the snapshot of your read ACL. Also, did you check if any other ACL on sys_attachment table is granting access to the user? You can use Access Analyser to check which ACLs are granting the access to user.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2025 12:59 AM
Hi Kalyan,
Read ACL on the sys_attachment would be my first guess, have you tried blocking read access to the sys_attachment_doc table?
How you are accessing the file? From the attachment bar on the record, from the activities, directly from the attachment table?
Are you sure that there are no other ACLs on that table that are granting access?
Regards,
Jerr-Z

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2025 01:04 AM
Read ACL for the sys_attachment table is the correct way of solving this:
https://www.servicenow.com/community/developer-forum/how-to-restrict-users-to-download-attachments/m...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-14-2025 01:02 AM
why to show the attachments then to those users if you are not allowing them to download?
If my response helped please mark it correct and close the thread so that it benefits future readers.
Ankur
✨ Certified Technical Architect || ✨ 9x ServiceNow MVP || ✨ ServiceNow Community Leader