In a hiring case type, only HR Managers should have read access to a candidate's...

To ensure that only HR Managers have read access to a candidate's reference letter attachment, the tasks involved include restricting read access according to a When condition (B) and configuring attribute-based access control on the Attachment Category (C). The When condition can specify criteria that must be met for the attachment to be accessible, such as the user's role being an HR Manager. Attribute-based access control allows for the definition of access rules based on attributes of the data or user, providing a flexible and granular approach to securing sensitive attachments like reference letters.References: Pega Community documentation on attachment security and attribute-based access control.