External Users cannot see knowledge article attachments

donnadavis
Tera Expert

We recently upgraded to Orlando.  We now have a problem with external users not being able to open knowledge article attachments.  After some debugging, I found the ACLs that needed to have the external role added for the users to view the attachments. I have not yet made the changes to our prod instance because I feel that these updates are leaving us open to external users having more access than intended.  I now wonder if there is a setting or property that I missed that would clear this up easier than changing all the ACLs.

My potential changes are:

  1. Add snc_external to 5 of the sys_attachment read ACLs
  2. Add snc_external role to Name=*, Type=ui_page, Operation=read ACL - Allow all internal users to access the UI pages without restriction (gives access to external users to $viewer.do)
  3. Add snc_external role to Name=*, Type=client_callable_script_include, Operation=execute - Allow all internal users to access the client callable script includes without restriction(gives access to Document Viewer preview)

Is there an easier way to handle this?  Thanks for your help

1 ACCEPTED SOLUTION

I had to do the following to correct the issue Add $viewer to sys_public table Add snc_external to the sys_attachment read ACLs Add ConversionRequestUtil as a client_callable_script_include in the ACL table

View solution in original post

5 REPLIES 5

sachin_namjoshi
Kilo Patron

IF you want external users to view KB article content in service portal, then you need to make respective KB portal pages public using below

 

https://docs.servicenow.com/bundle/orlando-servicenow-platform/page/product/knowledge-management/tas...

 

Regards,

Sachin

donnadavis
Tera Expert
The users can see the knowledge articles, they are getting a security error when they try to open the attachments that are on the knowledge articles

You will have to create ACL on sys_attachment table to allow external users to view attachments.

 

Regards,

Sachin

Hi,

 

Try to Read ACL for sys_attachment table. So that users can see the knowledge articles.

 

Thanks,

Kunal