{"id":32456,"date":"2026-08-10T07:05:49","date_gmt":"2026-08-10T07:05:49","guid":{"rendered":"https:\/\/www.greytrix.com\/blogs\/sagex3\/?p=32456"},"modified":"2026-08-10T07:05:49","modified_gmt":"2026-08-10T07:05:49","slug":"enhancing-attachment-management-and-security-in-sage-x3","status":"publish","type":"post","link":"https:\/\/www.greytrix.com\/blogs\/sagex3\/2026\/08\/10\/enhancing-attachment-management-and-security-in-sage-x3\/","title":{"rendered":"Enhancing Attachment Management and Security in Sage X3"},"content":{"rendered":"\n

In Sage X3, files can be attached to any standard object-based function, such as Sales Orders, Customers, and Invoices, using the Attachments button.<\/p>\n\n\n\n

In Sage X3 2022 R4 (12.0.32), Sage introduced optional enhancements to the attachments feature. The user interface has been simplified, enabling file uploads in a single step without manual effort. Additionally, attachments are now securely stored in an administrative storage area instead of an open volume. Lastly, filenames are managed more consistently before uploading.<\/p>\n\n\n\n

While these changes are optional, we highly recommend reviewing the following how-to guide and activating them to enhance the security of your attachments and improve the overall protection of your information system.<\/p>\n\n\n\n

Enabling the changes:<\/strong>
These changes can be enabled through the General Parameters menu:<\/p>\n\n\n\n

Navigate to: Setup<\/strong> > General Parameters > Parameter Values<\/p>\n\n\n\n

    \n
  1. Select the SUP chapter <\/li>\n\n\n\n
  2. Select details for the ATC (Attachments) section<\/li>\n<\/ol>\n\n\n\n
    \"Fig
    Fig 1<\/figcaption><\/figure>\n\n\n\n

    3.Select Yes for parameter value ATTSECUR (Attachment protection).<\/p>\n\n\n\n

    \"Fig
    Fig 2<\/figcaption><\/figure>\n\n\n\n

    4.This will enable the changes outlined above starting the next login.<\/p>\n\n\n\n

    Note:<\/strong>This will apply to any new attachments. Existing attachments will not be changed by the system.<\/p>\n\n\n\n

    SIMPLER FILE UPLOAD<\/p>\n\n\n\n

    Reminder<\/strong>: This is enabled only of the ATTSECUR (Attachment protection) parameter value is active.<\/p>\n\n\n\n

    The attachments window has been simplified as follows:<\/p>\n\n\n\n

    \"Fig
    Fig 3<\/figcaption><\/figure>\n\n\n\n

    The attachments list has been simplified, and users now have two options for uploading a new attachment to the record:<\/p>\n\n\n\n

      \n
    1. Upload file:<\/strong> This option allows users to upload an attachment directly from their local device, and it will be immediately listed in the attachments table without any additional input required. Users can either select a file through the browser\u2019s file selection window or drag and drop a file onto the upload section of the screen. Once uploaded, the file will appear in the attachments list, showing its filename (Document name), Type (derived from the file extension if available), and a default Category set to Confidential (which can be changed by the user and is for informational purposes only).<\/li>\n\n\n\n
    2. Select file:<\/strong> This opens a separate window where the user can choose a file from an existing volume on the server or upload a file from their local device to a server volume, similar to previous Sage X3 versions.<\/li>\n<\/ol>\n\n\n\n

      Secure Attachments:<\/strong><\/p>\n\n\n\n

      Secure attachments, once uploaded, are stored in an administrative volume that is accessible only to administrative users and is not visible to regular users through the Sage X3 volumes interface. <\/strong>The filenames are obfuscated and replaced with a generic sequence number.<\/p>\n\n\n\n

      With this option, the attachment can only be accessed from the Attachments window of the relevant record. Access to the attachment is therefore governed by the same functional access rights as the record it is attached to.<\/p>\n\n\n\n

      Users without access to a record will not be able to view its attachments through any other means.<\/p>\n\n\n\n

      Note:<\/strong> This is enabled only of the ATTSECUR (Attachment protection) parameter value is active.<\/p>\n\n\n\n

      Limitations:<\/strong><\/p>\n\n\n\n

        \n
      1. With secure attachments, the Keyword interface has been disabled and is no longer accessible manually. However, the keyword fields remain in the attachments table and can still be used programmatically.<\/li>\n\n\n\n
      2. .It is important to note that the actual filenames on disk will be modified by the system. The filenames can only be referenced from the attachments table using the Document name property.<\/li>\n\n\n\n
      3. Filename control: When uploading files, the system will now check for unwanted characters and display clear error messages if the file name is not valid.<\/li>\n<\/ol>\n\n\n\n

        4.The following characters are prohibited in attachment filenames:<\/p>\n\n\n\n