Restrict approvers from editing or deleting attachments on Service Request approvals in Service Port

[Subalakshmi P2]

Approvers are currently able to edit or delete attachments associated with RITMs while reviewing approvals in the Service Portal. Is this an out of the box behavior?

This behavior needs to be restricted. Approvers should be able to view and download the attachments required for approval, but they should not be allowed to edit, rename, or delete those attachments when the attachment belongs to a request or requested item for which they are an approver.

The restriction should apply only to attachments related to the approver’s own approval records. If the same user accesses attachments in other areas where they are not acting as an approver, their existing attachment access should remain unchanged. Please advise if this can be achieved.

[Ankur Bawiskar]

@Subalakshmi P2 

yes this is OOTB behavior, approvers have write access to update the approval record and hence can edit/update attachments

train your approvers not to delete rather than doing much customizations

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[Subalakshmi P2]

Hi @Ankur Bawiskar
Thanks for your response. 
This requirement is to strengthen approval integrity and audit compliance. Please advise on how to achieve this.

[Ankur Bawiskar]

@Subalakshmi P2 

then have sys_attachment Table.None DELETE ACL

-> check the table on which the file is about to get deleted and who is deleting it

-> if it's approver associated to that RITM sysId then set answer=false

-> use Advanced script in ACL

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏