/* SW • Added 01/12/2021 ** This was added to check for any non-interactive users (service accounts used for integrations) ** to ensure they only have access to attachments in which the record it is attached to is the ** same company as the service account. */ // Remove Prefix var tableName = current.table_name; if (tableName.startsWith("invisible.")) tableName = tableName.substring(10); else if (tableName.startsWith("ZZ_YY")) tableName = tableName.substring(5); var parentRecord = new GlideRecord(tableName); parentRecord.setWorkflow(false); parentRecord.get(current.table_sys_id) if (!gs.getSession().isInteractive()) return verifyReadAccessFromNonInteractiveUsers(parentRecord); function verifyReadAccessFromNonInteractiveUsers(parentRecord) { if ((gs.hasRole("snc_platform_rest_api_access")) && (parentRecord.canRead()) && (parentRecord.company == gs.getUser().getCompanyID())) return true; return false; }