Request catalog item with an unauthenticated user and attach files

[Mario Sanz]

Hello everyone.

I have configured an item to public. It can be requested by an unauthenticated user. I manage to make the request, but when attaching a file it gives an error:

POST https://dev201829.service-now.com/angular.do?sysparm_type=ngk_attachments&sys_id=18ee353c937331102f4... 401 (Unauthorized)

I have tried leaving the glide.image_provider.security_enabled property to false.
I have tried removing the authentication required check in the attach WS POST.
I have tried giving creation permissions to the public and snc_external role.
All without success.

Does anyone know if unauthenticated users can be given permissions to attach files to a public item? If it is possible, how can it be done?
Thank you

[Damian Martinez]

Hello @Mario Sanz ,
have you tried debugging security rules to check which ACL is blocking access to attachment table?
Regard,

Damian

[Damian Martinez]

Hello @Mario Sanz further to my comment above, yes I have seen case where unauthenticated users can see attachments from URL, but not sure about uploading to the table.

[Mario Sanz]

Thanks Damian for your comment. What do you mean with "access to attachment table", ACL for table or ACL for End Point? I've tried ACL for sys_attachment without success. And if i should create an ACL for endpoint, I don´t know whata is the name of the endpoint.

[Mario Sanz · Accepted solution]

Hello @Damian Martinez. Thanks for your help.

In the end we solved it by creating a custom widget as a colleague posted here.

It didn't work but once we found the solution, we added the fix so that the widget works in the previous link. Basically you have to create a widget that attaches the file without using the API resource that requires authentication.

I hope it helps you.