Separate permissions for the management of documents (attachments), e.g.:
* Delete documents before approval
* Delete documents after loan approval
As well as permissions for managing different type of documents, e.g.:
* Bank statement - view/edit
* Passport scan - view/edit
Many organisations only approve the loan once certain documents have been received, and for reference purposes it should not be possible to delete these after loan approval.