Employee Document Management

Purpose — Maintain the documentary records for each employee — identity proofs, appointment orders, deputation orders, qualification certificates, and other attachments.

Who Can Use It

• Regular employees may manage only their own documents.
• SchoolADMIN, DHE, and permission-holding DHE Employees may manage documents for employees they can access.

Key Capabilities

• Upload single or multiple documents against an employee, each tagged with a type. Automatically replace the previous document of the same type when a new one is uploaded (except for generic "other documents").
• View or download documents through a secured serve endpoint that enforces ownership checks.
• Update document metadata.
• Delete documents (soft-delete with audit).
• During deputation onboarding, attach deputation-order documents that are stored alongside the association.
• Bulk document uploads can flow through the approval workflow so that changes are reviewed before being applied.

How It Works

• Open the employee's Documents section.

• Choose the document type and select the file(s).

• Upload. The system stores the files privately, records their type/size/mime, and links them to the employee.

• View or download a document via the secured serve action; the system checks the caller's identity and permission before returning the file.

Rules & Restrictions

• Documents are never served through a public static URL. Every download goes through an authenticated endpoint that enforces ownership or explicit Document Read permission.
• Uploading a document of an existing type marks the previous file of that type as deleted so only the current version is served.
• Employees can only work with their own documents unless they have been explicitly granted Document Read/Update.