attachments web service (in progress)