We’ve introduced new permissions to give admins finer control over attachments and comments, along with an improved forms experience across the risks, issues, and third-party modules.

Forms: Cleaner display and improved usability

• The form URL can now be copied on the clipboard by clicking the copy button

• A new open in new tab option is available to quickly launch the form in a new browser tab

• These enhancements apply to forms in: Risks, Issues and Third-Party.

Risks: Separate permissions for 'Comments' and 'Attachments'

• A new permission tree Risks > Comments allows users to view comments

  • If not granted, the comments tab is hidden.

  • A new sub-permission Add comments allows posting new comments.

  • For existing users, this permission is granted by default to users with Edit risks to maintain existing access.

  • Import behaviour: if the user lacks the required comments permission, the import fails with an error.

• A new permission tree Risks > attachments allows users to view attached files

  • When not granted, the attachments tab is hidden.

  • New granular permissions include:

    • Download attachments

    • Upload attachments

    • Delete attachments

  • For existing users, this permission is granted by default to users with Edit risks to maintain existing access.

Risk treatments: new permission for 'Comments'

• A new permission tree Risk treatments > Comments allows users to view comments on risk treatments

  • When not granted, the comments tab is hidden

  • A new sub-permission Risk treatments > Comments > Add comments allows users to add comments.

• For existing users, this permission is granted by default to users with Risk treatments to maintain existing access.

Custom registers: new attachments permission set

• A new permission tree Attachments is now available under each custom register

  • When not granted, users cannot view the attachments tab for that custom register

  • When only the main permission is granted, users can view uploaded files and their details.

  • New granular permissions include:

    • Download attachments – allows downloading files.

    • Upload attachments – allows uploading new files.

    • Delete attachments – allows deleting existing files.

  • For existing users, this permission is granted by default to users with <register name> → Edit permission to maintain existing access.

• Administrators can grant these permissions to any user or role.