Attachments and files

Goal

Attach supporting files to business records and control who can see them.

Who it is for

Staff with attachment.view / attachment.manage. POS and portal have their own attachment endpoints with stricter limits.

Preconditions

• You can open the parent entity (invoice, party, ticket, …).
• Staff upload max 25 MB (max:25600 KB). Portal uploads max 10 MB.
• POS uploads typically allow jpg,jpeg,png,webp,pdf.

Steps

1. Open the entity detail screen.
2. Find the Attachments panel (EntityAttachmentsPanel).
3. Upload a file; set access scope when offered: internal | portal | public.
4. Download or remove attachments you are allowed to manage.

Result

Files are stored on the tenant operational DB path with RLS; portal users only see portal-scoped files.

Hard stops

Oversize file (validation error); missing attachment.manage; cross-tenant id → 404; wrong scope for portal audience.

Related

• Portal user hub
• Permissions model