# "Comments and Attachments" - Release 28

**URL:** https://discussions.eramba.org/t/comments-and-attachments-release-28/8046
**Category:** Forum - Software
**Tags:** question
**Created:** [January 6, 2026, 4:39pm UTC](https://discussions.eramba.org/t/comments-and-attachments-release-28/8046 "2026-01-06T16:39:30Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![jasonc](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/j/f9ae1b/32.png) [@jasonc](https://discussions.eramba.org/u/jasonc)
#### Post date: [January 6, 2026, 4:39pm UTC](https://discussions.eramba.org/t/comments-and-attachments-release-28/8046/1 "2026-01-06T16:39:30Z")

</div>

Hello, I’m receiving access issues from our users relating to release 28. I followed the access control instructions provided here - [Feature-Detailed view - Forum - Software - eramba](https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdiscussions.eramba.org%2Ft%2Ffeature-detailed-view%2F7931&data=05%7C02%7Cjasonc%40cwie.net%7C94c8c70c7dbc455e6a3208de4d215c3f%7C94aceea3f772455d8f5a64e2fd875c0f%7C0%7C0%7C639033002848759506%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=7brxldtyncXCy2ZkY0odAthe59AAWfs2154zlFnjYhY%3D&reserved=0)

Prior to release 28, all of our evidence providers utilized the “Comments and Attachments” group to provide evidence and then the GRC team would edit and complete the audits or maintenance tasks.

Within Access Control, I updated the “Comments and Attachments” group, selected Control Catalogue\>Internal Controls\>Internal Controls and then updated the “view accessible items” and “edit accessible items” to yes and then did the same for Audits and Maintenances. However, the users are still unable to view or edit the accessible items and receive an error message stating - No Access.

We only want our evidence providers to be able to provide an attachment and add a comment about that evidence. How do I get them this access?

---

<div class="post-metadata">

### Author: ![Adrian](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/a/82dd89/32.png) [@Adrian](https://discussions.eramba.org/u/Adrian)
#### Post date: [January 7, 2026, 10:48am UTC](https://discussions.eramba.org/t/comments-and-attachments-release-28/8046/2 "2026-01-07T10:48:15Z")

</div>

Hi, to access the Detailed View, you’ll need the following permissions:

- **View Accessible Items Details**

- **View List of Comments and Attachments / Download Attachments**

And to add/delete comments/attachments:

- **Create Comments and Attachments**

- **Delete Comments and Attachments**

---

<div class="post-metadata">

### Author: ![jasonc](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/j/f9ae1b/32.png) [@jasonc](https://discussions.eramba.org/u/jasonc)
#### Post date: [January 8, 2026, 3:09pm UTC](https://discussions.eramba.org/t/comments-and-attachments-release-28/8046/3 "2026-01-08T15:09:56Z")

</div>

Thank you Adrian, I’ll give that a try

---

<div class="post-metadata">

### Author: ![vidaktobyl](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/v/b5e925/32.png) [@vidaktobyl](https://discussions.eramba.org/u/vidaktobyl)
#### Post date: [January 12, 2026, 12:49pm UTC](https://discussions.eramba.org/t/comments-and-attachments-release-28/8046/4 "2026-01-12T12:49:36Z")

</div>

Is this a new permission?  
I had to add it to multiple roles across a few modules of Eramba, after some reported errors.  
Would appreciate a quick note in the chagelog, for things we (probably) need to do after a release.

---

<div class="post-metadata">

### Author: ![sam](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/s/5f9b8f/32.png) [@sam](https://discussions.eramba.org/u/sam)
#### Post date: [January 13, 2026, 8:10am UTC](https://discussions.eramba.org/t/comments-and-attachments-release-28/8046/5 "2026-01-13T08:10:48Z")

</div>

Yes, sorry about that. I added a note into release note.
