Public form on Service Portal

[Ben81]

Hello mates,

I do have an important question on a subject I am struggling until now.
We do have a public portal, with a public page, a public widget and a public record producer.
This form contains 15-20 questions and it works well for unauthenticated users.

Yes we do understand about the risk of this public form but we do accept it.

However I do have 2 issues:

A) On the form there is a reference field to another custom table. I did ensure the ACL on the table are correct and even on the table and table_list UI page ACL. I have done the test to go directly ton the /table_list.do page and it does work.
Even if I have done all that, the reference field doesn't show any record, but when I am logged in... it does. Any idea ?

B) Other aspect, on the form we would like to ask to attach a logo (picture). The unauthenticated user can see the icon on the below of the form to attach a picture, but it doesn't work. We do understand there is a risk and that's why I would prefer to hide this icon and I would like to use another option. Any idea ? Can we not have a "picture" type field on the form where the user can add a picture ?

Thank you very much for your help on this really important topic and have a wonderful day,
Ben

[Ashutosh Munot1]

Hi,

A) On the form there is a reference field to another custom table. I did ensure the ACL on the table are correct and even on the table and table_list UI page ACL. I have done the test to go directly ton the /table_list.do page and it does work.
Even if I have done all that, the reference field doesn't show any record, but when I am logged in... it does. Any idea ? HI Which ACL are on place on this table. You need to give read access to public role so people can view it on public widget. Table.none ACL

https://docs.servicenow.com/bundle/london-platform-administration/page/administer/contextual-securit...

B) Other aspect, on the form we would like to ask to attach a logo (picture). The unauthenticated user can see the icon on the below of the form to attach a picture, but it doesn't work. We do understand there is a risk and that's why I would prefer to hide this icon and I would like to use another option. Any idea ? Can we not have a "picture" type field on the form where the user can add a picture ?

Create your custom widget for attachment

https://serviceportal.io/downloads/require-attachments/

Modify above widget without roles.

Thanks,
Ashutosh

[Ben81]

Hello Ashutosh,
Thank you very much for your precious help.

A) You need to give read access to public role so people can view it on public widget. Table.none ACL
-> It's what I have done
table.none - Read - public
table.* - Read Public
UI page table - Public
UI page table_list - Public

B) Have you already tried it ? I will have a try but I am not so confident it does work as this widget might use the default API to insert an attachment.

Thanks,
Ben

[Ashutosh Munot1]

Hi,

Yeah you need access to sys_attachment table to save this attachment and hence the person needs access i.e. create access on this table. but might be risky.

Thanks,
Ashutosh

[Rohit Mohapatra]

Hi Ben, I'm facing the same issue with my form to submit details including ATTACHMENT, made a record producer to public for non-logged in users. Problem is that even after creating ACL for attachment table, it' still not working i.e. Attachment not getting uploaded nor the overall details can be submitted. @Ashutosh Munot please have a look.