If you are using a file system instead of a database for attachments, verify the service account file system permissions.
Ensure that the portal IIS service account (the account running the portal web application pool) has modify permissions for the Vista Attachment Repository.
This applies to: W-4s, Daily Reports, Personal Information, AP Invoice Review, Issues, Unapproved, Earnings, Expenses, Check Review.