Attachments
You can use attachments to provide supplementary information to specific business objects. Attachments can be URLs, desktop files, text, or repository folders.
For a business object you may view, create, delete, or edit attachments, depending on your role and granted privileges.
Repository
Attachments are stored in a content management repository provided by Oracle WebCenter Content Server. Users managing attachments can't interact with the repository unless the repository mode is enabled. When enabled, users can share attachments among objects, update attachments, and perform other tasks. Access to the attachment files is controlled by a digital signing mechanism.
All attachments are scanned for viruses before they're stored on the content management repository. If a virus is detected at the time of upload, the attachment request fails and the user is notified about it.
Security
Data security applicable to a specific business object also applies to its attachments For example, if a user has no access to a specific expense report, then that user can't access its attachments. You can also use attachment categories to control access and actions on attachments, based on roles associated with that category.