Script for file access control

If the users have access right to view a class record, then they can read all the files that are stored in the record. If you need to manage access rights to particular files, then you need to define a script in the given column, that will assess whether the user can read the file or not.
Following script enables to display or download files if the user has role 'cio'. In the other case an error message is displayed.

Where to use this script: Column of type File: Tab Script

if (OG.Person.IsUserInRole('cio'))
{
  return true;
}
else
{
  OGActualMessage.SetError('Access denied. You are not authorized to view this file.');
  return false;
}