Simplifying and Securing Attachments in Sage X3

Files can be attached to any standard Sage X3 object-based function such as Sales Orders, Customers, Invoices, etc. through the Attachments button.

Sage introduced some changes to the attachments feature of Sage X3 2022 R4 (12.0.32), which can be turned on optionally. The user interface has been simplified to allow uploading files in one action without requiring manual tasks. Attachments can now be stored in a secure administrative area rather than an open volume. Lastly, filenames are now managed more consistently before being uploaded as attachments.

While the changes we suggest are not mandatory, we recommend you review the following how-to guide and implement them to enhance your information system’s security. This will enable secure attachments and improve the overall safety of your system.

Activating the Changes

These changes can be activated in the General Parameters menu:

Go to Setup > General Parameters > Parameter Values
Select the SUP chapter
Select details for the ATC (Attachments) section
Select Yes for parameter value ATTSECUR (Attachment protection)

This will enable the changes outlined above starting the next login. This will apply to any new attachments. The system will not change existing attachments.

Simpler File Upload

Reminder: This is enabled only if the ATTSECUR (Attachment protection) parameter value is active.
The attachments window has been simplified as follows:

The attachments list is now simpler, and the user has two options to upload a new attachment to the record:

Upload file: This uploads an attachment directly from the user’s local device and lists it immediately in the attachments table with no additional user entry required. The user can either select a file through the browser’s selection window or drag a file onto the upload section of the screen. When uploaded, the file appears in the attachments list with its filename (Document name), Type (from the extension if present), and a default Category set to Confidential (The user can change this, and it is informative only).

Select file: This opens an additional window where the user can select a file from an existing volume on the server (or upload a file from the local device onto a volume on the server), as with previous Sage X3 releases.

Secure Attachments

Reminder: This is enabled only if the ATTSECUR (Attachment protection) parameter value is active.

When uploaded, secure attachments are stored in an administrative volume accessible only to administrative users and cannot be seen by normal users through the Sage X3 volumes interface. Their filenames are obscured and replaced with a generic sequence number.

With this option, the attachment can be retrieved only from the Attachments window on the relevant record, which means access to the attachment is subject to the same functional access rights as the actual record it is attached to.

Users who do not have access to a record will not be able to browse through its attachments in any other way.

Limitations

With secure attachments, the Keyword interface has been disabled and cannot be accessed manually. The keyword fields, however, are still present in the attachments table and can be used programmatically.

It is important to note that the system will change the actual filenames on the disk. The filenames can only be referred to from the attachments table through the Document name property.

Filename Control

When uploading files, the system will perform controls to remove unwanted characters and issue clear error messages when the file’s name cannot be used.
The following characters are not allowed in attachment filenames:

You cannot use @, %, and $ in Sage X3 file names (Sage X3 reserved characters)
You cannot use /, \, <, >,?, :, *, “, and | in operating system filenames (e.g. Windows)
You cannot use *,! #, and ? in any file name because those are used in regular expressions.

About Us

Greytrix Africa is a leading Sage business partner and ISV Partner offering Consulting, Implementation, and development services for Sage X3, Sage 300, Sage 300 People (HRMS), Sage CRM, and Sage Intacct, which covers East Africa, West Africa, SADC, and Middle East region. We offer professional services such as Implementation and Configuration, Business Process Analysis, Project Management, Integrations and Migrations, and Technical & Functional Support, along with enhancements within Sage X3, Sage 300 People (HRMS), Sage 300, Sage CRM, and Sage Intacct across various industry verticals like Process Manufacturing (Food & Beverages, Chemical), Discrete manufacturing (Automotive, Textile & Apparel), Non-Profit, Health-care Industry and Services Industry (Financial, Software & Engineering), Distribution (Transportation & Logistics), and Agriculture.

Sage Solutions

Integrations

Addons

Sage X3-Integrations

Sage Intacct Integrations

Sage 300 Integrations

Other Integrations

Sage X3 Addons

Sage Intacct Add-ons

Sage 300 Addons

Sage Solutions

Integrations

Addons

Integrations

Sage X3-Integrations

Other Integrations

Sage Intacct Integrations

Sage 300 Integrations

addons

Sage X3 Add-ons

Sage Intacct Add-ons

Sage 300 Addons

Process Manufacturing

Distribution

Discrete Manufacturing

Service Industry

Industry Specific

Sage Solutions

Integrations

Addons

Sage X3-Integrations

Sage Intacct Integrations

Sage 300 Integrations

Other Integrations

Sage X3 Addons

Sage Intacct Add-ons

Sage 300 Addons

Sage Solutions

Integrations

Addons

Integrations

Sage X3-Integrations

Other Integrations

Sage Intacct Integrations

Sage 300 Integrations

addons

Sage X3 Add-ons

Sage Intacct Add-ons

Sage 300 Addons

Process Manufacturing

Distribution

Discrete Manufacturing

Service Industry

Industry Specific

Simplifying and Securing Attachments in Sage X3