Protected document upload and download
Upload and download authorised client evidence with strict extension, MIME, ownership, visibility, path and size checks.
Proplix Secure API Gateway
Open guide →GuideUse the generic portal document-upload endpoint
POST a supported document for an owned portal context.
Open guide →GuideUse the generic portal document-download endpoint
GET an authorised document using its endpoint parameters.
Open guide →GuideUpload a Scroll/Quill compliance document
POST to /portal_api/scroll_document_upload with application_id and source_module.
Open guide →GuideSelect the Scroll source module
Use full_compliance_applications, license_applications or one_off_compliance.
Open guide →GuideProvide application_id
The application must exist and belong to the authenticated client/contact.
Open guide →GuideProvide the uploaded file
Use the endpoint file field expected by the supplied controller.
Open guide →GuideUnderstand the 15 MB limit
Scroll uploads larger than 15 MB are rejected.
Open guide →GuideUnderstand supported Scroll extensions
PDF, JPG/JPEG, PNG, TXT, DOC/DOCX and XLS/XLSX are supported.
Open guide →GuideUnderstand MIME validation
Extension and MIME must match the allow-list.
Open guide →GuideUnderstand DOCX/XLSX archive validation
The ZIP container must include [Content_Types].xml and word/document.xml or xl/workbook.xml.
Open guide →GuideUnderstand secure storage
Files are stored beneath uploads/clients/scroll_portal/quill_uk with directory 0750 and file 0640 controls.
Open guide →GuideUnderstand safe generated filenames
Original names are sanitised for response metadata while stored filenames are generated.
Open guide →GuideUnderstand created document records
The module model records Client upload, uploaded status, client/landlord visibility and uploader context.
Open guide →GuideDownload a Scroll document
GET /portal_api/scroll_document_download?id={id}&mod={module}.
Open guide →GuideUnderstand download ownership
The document/application must belong to the client, match contact rules and be visible_to_landlord.
Open guide →GuideUnderstand download path roots
Only approved Scroll upload or module upload roots are allowed.
Open guide →GuideUnderstand secure download headers
Downloads use attachment, nosniff, private no-store and no-cache headers.
Open guide →GuideResolve document not found
Check ID, module, ownership, visibility, stored path and readability.
Open guide →GuideResolve invalid file type
Use a supported extension with matching MIME and valid Office archive structure.
Open guide →