Attachments

Attachments in smenso allow files to be linked to objects such as project details, tasks, and status reports. They are commonly used to store supporting documents, specifications, images, or other artifacts that are relevant for execution and reporting. In the UI, all attachments from a project context also show up in the project's Files tab so users can find and manage everything in one place.

Attachment Types

smenso supports two attachment types:

📘

The maximum file size for uploads is 500 MB.

Available Endpoints

Integration JSON API

Project attachments:

Task attachments:

Status report attachments:

Integration XML API / Reporting API

Attachment Response Fields

When listing attachments, the response contains the following fields:

Typical Integration Workflows

1) List attachments (get attachment IDs)

To download or delete an attachment, you first need its attachmentId. Use the list endpoint for the relevant context:

• Get project attachments
• Get task attachments
• Get status report attachments

Example response:

[
  {
    "id": "fa255fd8-2572-4881-92a9-2f5921b04d35",
    "name": "test.gif",
    "size": 912712,
    "type": ".gif",
    "uploadedById": "12345678-aa12-3d4f-ab5e-ad6e78dffbc9",
    "uploadedBy": "Jane Doe",
    "uploadedOn": "2026-02-12T09:49:49.3011721+00:00"
  }
]

📘

Project attachments: The projectOnly parameter controls the scope of the response. Set it to true to fetch only files attached in the project details (master data), or false/omit to fetch all files across the project (including task and status report attachments).

2) Download an attachment

Use Download attachment with the attachmentId:

curl --request GET \
     --url https://customersubdomain.smenso.cloud/skyisland/api/integration/attachment/json/fa255fd8-2572-4881-92a9-2f5921b04d35 \
     --header 'Authorization: Basic xxxx' \
     --header 'accept: application/json'

📘

For uploaded attachments, the endpoint returns the file content as binary data. For OneDrive/SharePoint-linked attachments, the endpoint returns metadata including the link URL – the file content itself must be retrieved from Microsoft 365.

3) Upload a new attachment

Use the upload endpoint that matches the context:

• Upload project attachment
• Upload task attachment
• Upload status report attachment

Example (upload to a project):

curl --request POST \
     --url https://customersubdomain.smenso.cloud/skyisland/api/integration/attachment/project/json/{projectId} \
     --header 'Authorization: Basic xxxx' \
     --header 'Content-Type: multipart/form-data' \
     --form 'file=@/path/to/document.pdf'

📘

The maximum file size is 500 MB. For status report attachments, the report must be saved (at least as a draft) before files can be attached.

4) Delete an attachment

Use Delete attachment with the attachmentId:

curl --request DELETE \
     --url https://customersubdomain.smenso.cloud/skyisland/api/integration/attachment/json/fa255fd8-2572-4881-92a9-2f5921b04d35 \
     --header 'Authorization: Basic xxxx'

Special Case: XML / Reporting Endpoint

The XML/Reporting endpoint does not return attachment IDs by default. To access them, you need to create a Formula Flavor in the UI that exposes the attachmentId for the respective object (e.g., project, task, or status report). Once you have the IDs, you can download or manage the attachments via the dedicated attachment endpoints.

You can also retrieve attachment IDs programmatically:

• Use the JSON API list endpoints to get attachment metadata including IDs.
• Use the Reporting API to download attachments or documents directly.

Permissions & Visibility

Attachments follow the permission model of their parent object:

• If a user cannot view the project/task/status report, they cannot access its attachments.
• If visibility or access restrictions apply, attachment retrieval is limited accordingly.
• For OneDrive/SharePoint links, Microsoft permissions apply as well.
• When linking from OneDrive/SharePoint, smenso sets Microsoft sharing defaults so the file is shared within your Microsoft 365 organization and is editable for organization members.

If a user cannot perform an action in the UI, the API will not allow it either.

Further Reading

• Attachments in the smenso Help Center – UI workflows, permissions, and troubleshooting
• Status Reports Guide – Attachments in the context of status reports
• Permissions & Privacy Guide – How access control works