Personal Documents: employee sees/uploads only their own [('employee_id.user_id', '=', user.id)] Personal Documents: HR sees/manages all [(1, '=', 1)]