The Attachments widget in Pega allows users to add files and links to a case. However, in many applications, file uploads should only be available to specific users based on their access.
In Pega Infinity ’26, the Attachments widget can reflect the Create access configured through Attachment Categories, allowing the Add File option to be controlled based on user access.
Demo : https://youtu.be/L5UhqZM-VAU
Configuring the OOTB File Attachment Category
Pega provides an OOTB File Attachment Category, which supports the general file attachment capability available in cases.
For this implementation, I copied the OOTB File Attachment Category into the application layer so that its security configuration could be customized.
I then disabled the Create operation for this general File Attachment Category. This restricts the general file creation access and allows file uploads to be controlled more granularly through specific Attachment Categories configured for the application.
Creating a Specific Attachment Category
To provide more granular control, I created a new Attachment Category called Target Document for the case type.
For this category, the Create operation is controlled using an Upload privilege. Only users with the required privilege are allowed to create file attachments through this category.
Depending on the business requirement, When rules can also be used to control Create access, providing additional flexibility in defining who should be allowed to upload files.
How the Attachments Widget Responds
For a user who has the required Upload privilege, Create access is granted through the configured Target Document Attachment Category.
As a result, the Add File option is available directly from the Attachments widget.
To verify the restricted scenario, I tested the same case using a Target Coordinator operator who does not have the required Upload privilege through their access role.
For this user, Create access through the configured Attachment Category is not granted. The Attachments widget reflects this restriction by removing the Add File option, while Add Link remains available.
Conclusion
This provides a useful way to control the Add File option in the Pega Infinity ’26 Attachments widget based on Attachment Category security.
By configuring Create access using privileges, When rules, and access roles, file-upload availability can be controlled for different users while keeping the actions displayed in the widget aligned with their configured access.