A normal employee can also upload documents in the monthly payslips folders. This usually leads to unnecessary confusion amongst HR and employees. It should not be allowed.

When we're programmatically creating the folder, we should make upload access only to admin/payroll admin as per the current config...p