Attachments visible for requestor in csm module

[Hafsa1]

I have a requirement to have attachment visible only for requestor and 2 groups for particular record producer.

RP will create case with particular subcategory, requirement is when subcategory=9, then any attachment should be visible only to requestor and 2 groups and can be added/removed only by these. How to achieve it?

[Omkar Kumbhar]

Hello @Hafsa1 ,

Create the read ACL on sys_attachment table and add your conditions , below is the sample example

[Ankur Bawiskar · Accepted solution]

@Hafsa1 

you can use table.None READ ACL on sys_attachment with advanced script

Condition: current.table_name == 'targetTableName'

Advanced script:

var gr = new GlideRecord("targetTable");
gr.addQuery("sys_id", current.table_sys_id);
gr.addQuery("subcategory", "9");
gr.query();
answer = gr.hasNext() && (gs.getUser().isMemberOf('Group A') || gs.getUser().isMemberOf('Group B'));

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Hafsa1]

@Ankur Bawiskar  Thanks, I was struggling with BR but seems ACL is best option