GDPR-clean attachment deletion

`DELETE /ticket/{ticketId}/attachment/{attachmentId}`

Permanently removes a single attachment from a ticket or its conversations: deletes the S3 object, the files row, and strips the entry from the ticket/conversation attachments JSON.

The attachment is identified by its numeric id field inside the JSON array. Search covers both ticket-level and conversation-level attachments.

Requires the updateTechnicalTicketFields permission (admin / role 1 only). This action is irreversible.

Path parameters

ticketIdintegerpathrequired

The id of the ticket that owns the attachment

attachmentIdstringpathrequired

The id of the attachment entry to delete (alphanumeric string, e.g. an 8-char hex hash)

Responses

200 — Attachment deleted successfully

Response Example

{
  "success": true
}

403 — Unauthorized — requires updateTechnicalTicketFields permission

404 — Ticket or attachment not found

500 — Internal error