When using a Document-type field in a People data update flow, employees must have permission to upload documents to at least one Employee folder in Docs.
Once these permissions are granted, employees can:
- Upload documents through the flow
- Upload documents directly from the Docs section
This means users can bypass the intended process and upload files directly into folders without completing the required fields in the flow
There is currently no way to:
- Allow document uploads only through a flow
- Prevent direct uploads to folders while still allowing uploads through Document fields
Both behaviours rely on the same folder permissions.
*Possible Workaround*
Even if employees upload the document directly into their folder first, they can still complete the flow afterwards.
Document-type fields can use:
- Newly uploaded documents
- Existing documents already stored in the employee folder
This allows employees to select the previously uploaded document during the flow submission so the required data can still be captured.