Attaching documents to a damage case
You can attach documents such as photos, estimates, and correspondence to a damage case, either by uploading a file or by ingesting a document from a URL. Documents are handled through the shared Document module using the "DamageCase" association. This article explains both methods and how to list, preview, and remove documents.
Before you start
Uploading, ingesting, and deleting documents require the Manage documents permission (documents:manage). Listing and previewing documents require the View documents permission (documents:view). Ingesting from a URL through the damage case additionally uses the Transition damage cases permission (damage-management:transition). These are held by SystemAdmin and FleetManager by default.
Upload a file
Open the damage case and upload a document to it. Each upload requires a file and a document category.
| Field | Required | Purpose |
|---|---|---|
| File | Yes | The document to attach. Must not be empty. |
| Category | Yes | Must match an active system document category. Categorizing keeps a case's files organized. |
| Beleg reference | No | An optional link to a related Beleg (receipt/expense document). |
The file name, content type, size, uploader email, and upload date are recorded automatically. An uploaded document is stored as version 1; if content is added later, the most recent version is what downloads.
Note: The category must be one of your tenant's active system document categories. If the category is missing or does not match an active one, the upload is rejected.
Ingest a document from a URL
Instead of uploading a file, you can point the case at a document URL and let the system fetch it in the background. Submit the URL on the case; the request is validated, queued, and accepted immediately, returning a job identifier and a "Queued" status. The document is retrieved by a background worker.
URLs are checked before any download is attempted, to protect against server-side request forgery:
- The URL must be an absolute
httporhttpsaddress. - Private and local network targets are blocked, including localhost, loopback, link-local, and private ranges such as 10.x, 172.16-31.x, and 192.168.x.
- If your tenant configures an allowed-host list, only hosts on that list are permitted.
Warning: A rejected URL is never downloaded. If ingestion is refused, check that the address is a public http or https URL and, if an allow-list is configured, that the host is included.
List, preview, and delete
- List: the case's document list shows each attachment's file name, content type, size, category, and date, newest first.
- Preview or download: retrieving a document returns the content of its latest version.
- Delete: removing a document deletes it and its versions from the case.
Warning: Documents cannot be deleted from a closed case. Remove any unwanted attachments before closing the case.
Related
- Recording financial line items on a damage case
- Assigning an insurer and opening a claim
- Damage analytics, the financial report, and data export
