/app/api/vendors/attachments/