diff --git a/app/Config/Filters.php b/app/Config/Filters.php
index f0aeda92..609b6738 100755
--- a/app/Config/Filters.php
+++ b/app/Config/Filters.php
@@ -69,7 +69,7 @@ class Filters extends BaseConfig
         'before' => [
             'HttpRequestLog' => ['except' => 'cli/*'],
             'Cors',
-            'AclFilter' => ['except' => ['login', 'logout', 'auth/*', 'oauth2callback','claim-form-download', 'claims-feedback-form', 'autobookstackLogin','employeeRest/*','processjob','getCommission','downloadEmployeeEcardZip', 'downloadClaimFile']],
+            'AclFilter' => ['except' => ['login', 'logout', 'auth/*', 'oauth2callback','claim-form-download', 'claims-feedback-form', 'autobookstackLogin','employeeRest/*','processjob','getCommission','downloadEmployeeEcardZip', 'downloadClaimFile/*']],
             'SecurityInputFilter' => ['except' => ['/client/notification/create','/ticket/crud_mail_template/*','test_mail','leads/sendMail', 'ticket/reply'] ],
             'GlobalPostFileUploadGuard'
             // 'csrf',
diff --git a/app/Controllers/PolicyTransactionController.php b/app/Controllers/PolicyTransactionController.php
index 6dcb63ad..7bce36eb 100644
--- a/app/Controllers/PolicyTransactionController.php
+++ b/app/Controllers/PolicyTransactionController.php
@@ -996,14 +996,14 @@ class PolicyTransactionController extends BaseController
             'pos_id'             => ['label' => 'POS', 'rules' => 'permit_empty', 'errors' => []],
             'doc_name.*' => [
                 'label'  => 'Policy Document Name',
-                'rules'  => 'permit_empty|regex_match[/^[a-zA-Z0-9 _-]+$/]|min_length[2]|max_length[100]',
+                'rules' => 'permit_empty|regex_match[/^[a-zA-Z0-9 \/_-]+$/]|min_length[2]|max_length[100]',                
                 'errors' => [
                     'regex_match' => 'The {field} can only contain letters, numbers, spaces, dashes, and underscores.'
                 ]
             ],
             'other_docs_name.*' => [
                 'label'  => 'Vehicle Document Name',
-                'rules'  => 'permit_empty|regex_match[/^[a-zA-Z0-9 _-]+$/]|min_length[2]|max_length[100]',
+                'rules' => 'permit_empty|regex_match[/^[a-zA-Z0-9 \/_-]+$/]|min_length[2]|max_length[100]',
                 'errors' => [
                     'regex_match' => 'The {field} can only contain letters, numbers, spaces, dashes, and underscores.'
                 ]
@@ -2670,7 +2670,7 @@ class PolicyTransactionController extends BaseController
                 'co_share_id.*'        => ['label' => 'Record ID', 'rules' => 'permit_empty','errors' => []],
                 'doc_name.*' => [
                     'label'  => 'Policy Document Name',
-                    'rules'  => 'permit_empty|regex_match[/^[a-zA-Z0-9 _-]+$/]|min_length[2]|max_length[100]',
+                    'rules' => 'permit_empty|regex_match[/^[a-zA-Z0-9 \/_-]+$/]|min_length[2]|max_length[100]',                    
                     'errors' => [
                         'regex_match' => 'The {field} can only contain letters, numbers, spaces, dashes, and underscores.'
                     ]