Goal:
Add attachments over the API and have the same options to control access rights to them as for other attachments added manually in HubSpot.
Background:
Attachment files added manually in HubSpot are created with access “HIDDEN_PRIVATE” which makes them unavailable to all user who has access to HubSpot file tool and allows to set access rights using Object Access permissions.
Problem:
According to the documentation - “All files uploaded through the API will be visible in the files dashboard and the files picker. Hidden files cannot be created. However, private files and non-indexable files can still be created.” which is a risk cause such attachments will be exposed to anyone with access to HubSpot Marketing file tool. It is possible to customize access to such files by customizing folder’s access in the files tool but it doesn’t have all the opportunities as object access customization has so it’s impossible to have equal access rights for all object’s attachment.
Idea:
Allow creating hidden file using API so that all attachments (created manually and over the API) are stored equally and the same access rights could be set.