Attachment category visibility while attaching to an email
Documentation says that attachment categories are business classifications and that you can control who can access them and how, using privileges and when rules.
If I define Category1 in my case type settings, and only who has Privilege1 can view it, what happens when I attach all attachment of Category1 to an email (using a Send Email shape for instance) and in the "Send to" field I specify an operator who does not have Privilege1? Does he receve and see the attachment?
Do the privilege/when settings of the attachment category apply also when attaching files to an email?
Accepted Solution
Posted: 1 month ago
Updated: 4 weeks ago
Hello,
I replicated your scenario in the following manner.
1. Created an attachment category with Create and View enabled and specified the privilege to an operator
2. Tried whether I can attach the attachment with respect to that category with out adding the privilege and user is unable to attach the attachment.
3. Now added the privilege to users ARO and verified whether user is able to attach or not. User is able to attach attachment to case with respect to that category.
4.Now emailed the attachment to the operator who is not having privilege and also to external mailed id user for whom operator id is not there in Pega. Email went successfully.
5. Once the mail is sent verified in the external E-mail whether the attachment is getting accessed or not. User is able to view the document that is mailed.
Hence it is proved that there is no restriction for viewing the attachments that are mapped to restricted category with specific privileges when an E-mail is sent with attachments.
Access control when, privileges are applied while user is trying to perform any of the operations(create,view,read,delete) but not while mailing the attachments.
Access restriction can be provided at the attachment level based on Work group. Following link contains the examples.
https://community.pega.com/sites/default/files/help_v63sp1/Content/howto/howto2/howtoattachmentcategory.htm#:~:text=Click%20the%20Enable%20Attachment%20Level,select%20the%20Enable%20Security%20checkbox.