server/AyaNova/biz/BizRoles.cs

@@ -426,6 +426,19 @@ namespace AyaNova.Biz
             });
 
 
+            ////////////////////////////////////////////////////////////
+            //FILEATTACHMENT ADMINISTRATION
+            //This is not for attachments themselves which are tied to the object they are attached to
+            //this is for things like maintenance jobs or viewing lists of all attachments in general for bulk ops etc
+            //  NOTE: Attachments are considered business data and as such are not available to OPS roles
+            // who are not allowed to see biz data    
+            roles.Add(AyaType.FileAttachment, new BizRoleSet()
+            {
+                Change = AuthorizationRoles.BizAdminFull,
+                ReadFullRecord = AuthorizationRoles.BizAdminFull | AuthorizationRoles.BizAdminLimited
+            });
+
+
             ////////////////////////////////////////////////////////////
             //OPERATIONS / JOBS
             //Only opsfull can change operations