External Users cannot see knowledge article attachments

[donnadavis]

We recently upgraded to Orlando.  We now have a problem with external users not being able to open knowledge article attachments.  After some debugging, I found the ACLs that needed to have the external role added for the users to view the attachments. I have not yet made the changes to our prod instance because I feel that these updates are leaving us open to external users having more access than intended.  I now wonder if there is a setting or property that I missed that would clear this up easier than changing all the ACLs.

My potential changes are:

1. Add snc_external to 5 of the sys_attachment read ACLs
2. Add snc_external role to Name=*, Type=ui_page, Operation=read ACL - Allow all internal users to access the UI pages without restriction (gives access to external users to $viewer.do)
3. Add snc_external role to Name=*, Type=client_callable_script_include, Operation=execute - Allow all internal users to access the client callable script includes without restriction(gives access to Document Viewer preview)

Is there an easier way to handle this?  Thanks for your help

[donnadavis · Accepted solution]

I had to do the following to correct the issue Add $viewer to sys_public table Add snc_external to the sys_attachment read ACLs Add ConversionRequestUtil as a client_callable_script_include in the ACL table