Read-only permissions on Files

Question

When a user is looking at a case or contact, I'd like them to only see Files associated to the record, but not have the ability to upload a File.

Right now, the Standard Files Related List allows for uploads:

I'd like this component to only show existing files, but prevent uploading new files.

I tried looking at Profiles and permissions, but there's no dedicated section for Files (which is not a surprise - they're really a combination of ContentDocument, ContentVersion and ContentDocumentLink), and the related list in the page layout editor doesn't let you adjust the actions you can do there:

I'm trying to avoid having to create a custom lightning component myself, but that seems to be the only route at the moment...

Answer 1

I suggest writing a trigger on ContentVersion Object to prevent user from uploading the file on case and contact object. We do not have any such permission to restrict user from uploading a file from local drive if user have the permission to read or edit the object.

To attach files to records: Read OR Edit on the object

By the way, you have ability to prevent user uploading Salesforce existing files, not from local drive.

1. From Setup, enter User Profiles in the Quick Find box, and select Profiles.
2. Click Edit next to the user profile you want to change.
3. In the Administrative Permissions section, enable or disable the Select Files from Salesforce checkbox, and click Save.

NOTE:- Another option is to apply the permission in a permission set. Users who have this permission disabled are still able to upload files from their local drive. To apply the permission in a permission set, from Setup enter Permission Sets in the QuickFind box, then select Permission Sets. Edit the permission set and apply the Select Files from Salesforce permission.

Reference:- Prevent Users from Attaching Salesforce Files