Unable to download the attachments from activity stream in Service PortalDescription<!-- div.margin{ padding: 10px 40px 40px 30px; } table.tocTable{ border: 1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); padding-top: .6em; padding-bottom: .6em; padding-left: .9em; padding-right: .6em; } table.noteTable{ border:1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); width: 100%; border-spacing:2; } table.internaltable { white-space:nowrap; text-align:left; border-width: 1px; border-collapse: collapse; font-size:14px; width: 85%; } table.internaltable th { border-width: 1px; padding: 5px; border-style: solid; border-color: rgb(245, 245, 245); background-color: rgb(245, 245, 245); } table.internaltable td { border-width: 1px; padding: 5px; border-style: solid; border-color: #E0E0E0; color: #000000; } .title { color: #D1232B; font-weight:normal; font-size:28px; } h1{ color: #D1232B; font-weight:normal; font-size:21px; margin-bottom:-5px } h2{ color: #646464; font-weight:bold; font-size:18px; } h3{ color: #000000; font-weight:BOLD; font-size:16px; text-decoration:underline; } h4{ color: #646464; font-weight:BOLD; font-size:15px; text-decoration:; } h5{ color: #000000; font-weight:BOLD; font-size:13px; text-decoration:; } h6{ color: #000000; font-weight:BOLD; font-size:14px; text-decoration:; } ul{ list-style: disc outside none; margin-left: 0; } li { padding-left: 1em; } --> Symptoms Certain users, like the approver on a request, are not able to download the attachment from the activity stream of the approval form (or any other record) in the Service Portal. Release Jakarta, Kingston Cause The issue may occur due to the approver not having enough roles to grant read access on the [sys_attachment] table. Resolution This is a customization to alter OOB system behavior. Customization and implementation assistance are out of the scope of support and the customized scripts, if any, will be skipped during an upgrade. As a workaround to this, a read ACL can be created on the [sys_attachment] table that would allow users to access the sys_attachment record, subsequently letting the affected user download the record. Go to sys_security_acl.list (System security > Access control)Create a new READ type ACL on [sys_attachment] (sys_attachment.none), allowing users to provide read access to sys_attachment records. The above workaround grants access to the sys_attachment table. Make sure to have thorough testing done to ensure it does not interfere with any other business logic. Additional Information Create an ACL