We have a custom list which is being used for management of controlled documents. There are several document types with associated InfoPath forms and file attachments enabled. We are using the basic approval workflow, so that any changes to documents must be approved.

Problem: One of our users just discovered that if you have contribute permission to the list and you open a file attachment, you can edit and save the attachment (using the /Lists/ListName/Attachments/xxx path which office apps display openly in the save dialog), leaving the document status still on Approved without no hint whatsoever that the attachment was edited (aside from a new document version), completely bypassing the draft/approval system. This kind of completely defeats the purpose of having it.

We either need to disable saving documents directly (non-ideal since it means updating an attachment requires saving it to the user's PC, deleting the original attachment, and then attaching the updated copy, which is onerous), or get it to play nice with the draft/approval system.

What are our options?

1 Answer 1


I think you're best option is a document library. This would also allow you to maintain versions of documents in case there is ever a need to roll back changes.

  • Our setup uses InfoPath forms for data filling, with the form information displayed as columns in the list. Documents are added as attachments, and a single item in the list may have zero or more attachments. Document Library is for individual documents without forms, right? Doesn't seem like it would work for our purposes. Mar 5, 2018 at 20:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.