vendor attachments undr purchaser authentication