To handle the case of limited access of documents for the employees by default ERPNext has added a new user type ‘Employee Self Service’.
Somewhat related doc https://docs.erpnext.com/docs/user/manual/en/setting-up/users-and-permissions/limited-user
Someone asked this before. Employee Self Service v13
The spec [Request for Comments] Introducing User Type for restricted user