Added the download permission to get persigned Url API

Marco.Pms.DataAccess/Data/ApplicationDbContext.cs

@@ -1029,6 +1029,7 @@ namespace Marco.Pms.DataAccess.Data
                 new FeaturePermission { Id = new Guid("3f6d1f67-6fa5-4b7c-b17b-018d4fe4aab8"), FeatureId = new Guid("a8cf4331-8f04-4961-8360-a3f7c3cc7462"), IsEnabled = true, Name = "Upload Document", Description = "Grants a user the authority to upload the document" },
                 new FeaturePermission { Id = new Guid("c423fd81-6273-4b9d-bb5e-76a0fb343833"), FeatureId = new Guid("a8cf4331-8f04-4961-8360-a3f7c3cc7462"), IsEnabled = true, Name = "Mofify Document", Description = "Grants a user the authority to modify document" },
                 new FeaturePermission { Id = new Guid("40863a13-5a66-469d-9b48-135bc5dbf486"), FeatureId = new Guid("a8cf4331-8f04-4961-8360-a3f7c3cc7462"), IsEnabled = true, Name = "Delete Document", Description = "Grants a user the authority to delete the document" },
+                new FeaturePermission { Id = new Guid("404373d0-860f-490e-a575-1c086ffbce1d"), FeatureId = new Guid("a8cf4331-8f04-4961-8360-a3f7c3cc7462"), IsEnabled = true, Name = "Download Document", Description = "Grants a user the authority to download the document" },
                 new FeaturePermission { Id = new Guid("13a1f30f-38d1-41bf-8e7a-b75189aab8e0"), FeatureId = new Guid("a8cf4331-8f04-4961-8360-a3f7c3cc7462"), IsEnabled = true, Name = "Verify Document", Description = "Grants a user the authority to verify the document" },
 
                 // Directory Management Feature

Marco.Pms.DataAccess/Migrations/20250830045512_Added_New_Permission_To_Download_Document.cs

@@ -0,0 +1,211 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Marco.Pms.DataAccess.Migrations
+{
+    /// <inheritdoc />
+    public partial class Added_New_Permission_To_Download_Document : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.UpdateData(
+                table: "DocumentCategoryMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2627));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentCategoryMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2617));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("07ca7182-9ac0-4407-b988-59901170cb86"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2718));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("16c40b80-c207-4a0c-a4d3-381414afe35a"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2700));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("260abd7e-c96d-4ae4-a29b-9b5bb5d24ebd"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2710));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("2d1d7441-46a8-425e-9395-94d0956f8e91"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2695));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("336225ac-67f3-4e14-ba7a-8fad03cf2832"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2684));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("5668de00-5d84-47f7-b9b5-7fefd1219f05"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2731));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("6344393b-9bb1-45f8-b620-9f6e279d012c"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2690));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("7cc41c91-23cb-442b-badd-f932138d149f"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2727));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("846e89a9-5735-45ec-a21d-c97f85a94ada"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2722));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("a1a190ba-c4a8-432f-b26d-1231ca1d44bc"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2714));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("f76d8215-d399-4f0e-b414-12e427f50be3"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2705));
+
+            migrationBuilder.InsertData(
+                table: "FeaturePermissions",
+                columns: new[] { "Id", "Description", "FeatureId", "IsEnabled", "Name" },
+                values: new object[] { new Guid("404373d0-860f-490e-a575-1c086ffbce1d"), "Grants a user the authority to download the document", new Guid("a8cf4331-8f04-4961-8360-a3f7c3cc7462"), true, "Download Document" });
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DeleteData(
+                table: "FeaturePermissions",
+                keyColumn: "Id",
+                keyValue: new Guid("404373d0-860f-490e-a575-1c086ffbce1d"));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentCategoryMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(8988));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentCategoryMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(8981));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("07ca7182-9ac0-4407-b988-59901170cb86"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9059));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("16c40b80-c207-4a0c-a4d3-381414afe35a"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9042));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("260abd7e-c96d-4ae4-a29b-9b5bb5d24ebd"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9051));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("2d1d7441-46a8-425e-9395-94d0956f8e91"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9038));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("336225ac-67f3-4e14-ba7a-8fad03cf2832"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9028));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("5668de00-5d84-47f7-b9b5-7fefd1219f05"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9072));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("6344393b-9bb1-45f8-b620-9f6e279d012c"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9034));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("7cc41c91-23cb-442b-badd-f932138d149f"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9068));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("846e89a9-5735-45ec-a21d-c97f85a94ada"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9063));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("a1a190ba-c4a8-432f-b26d-1231ca1d44bc"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9055));
+
+            migrationBuilder.UpdateData(
+                table: "DocumentTypeMasters",
+                keyColumn: "Id",
+                keyValue: new Guid("f76d8215-d399-4f0e-b414-12e427f50be3"),
+                column: "CreatedAt",
+                value: new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9046));
+        }
+    }
+}

Marco.Pms.DataAccess/Migrations/ApplicationDbContextModelSnapshot.cs

@@ -931,7 +931,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         new
                         {
                             Id = new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(8981),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2617),
                             Description = "Project documents are formal records that outline the plans, progress, and details necessary to execute and manage a project effectively.",
                             EntityTypeId = new Guid("c8fe7115-aa27-43bc-99f4-7b05fabe436e"),
                             Name = "Project Documents",
@@ -940,7 +940,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         new
                         {
                             Id = new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(8988),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2627),
                             Description = "Employment details along with legal IDs like passports or driver’s licenses to verify identity and work authorization.",
                             EntityTypeId = new Guid("dbb9555a-7a0c-40f2-a9ed-f0463f1ceed7"),
                             Name = "Employee Documents",
@@ -1026,7 +1026,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("336225ac-67f3-4e14-ba7a-8fad03cf2832"),
                             AllowedContentType = "application/pdf,image/jpeg",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9028),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2684),
                             DocumentCategoryId = new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
                             IsActive = true,
                             IsMandatory = true,
@@ -1041,7 +1041,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("6344393b-9bb1-45f8-b620-9f6e279d012c"),
                             AllowedContentType = "application/pdf,image/jpeg",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9034),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2690),
                             DocumentCategoryId = new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
                             IsActive = true,
                             IsMandatory = true,
@@ -1056,7 +1056,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("2d1d7441-46a8-425e-9395-94d0956f8e91"),
                             AllowedContentType = "application/pdf,image/jpeg",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9038),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2695),
                             DocumentCategoryId = new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
                             IsActive = true,
                             IsMandatory = true,
@@ -1071,7 +1071,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("16c40b80-c207-4a0c-a4d3-381414afe35a"),
                             AllowedContentType = "application/pdf,image/jpeg",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9042),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2700),
                             DocumentCategoryId = new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
                             IsActive = true,
                             IsMandatory = true,
@@ -1086,7 +1086,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("f76d8215-d399-4f0e-b414-12e427f50be3"),
                             AllowedContentType = "application/pdf,image/jpeg",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9046),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2705),
                             DocumentCategoryId = new Guid("2d9fb9cf-db53-476b-a452-492e88e2b51f"),
                             IsActive = true,
                             IsMandatory = true,
@@ -1101,7 +1101,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("260abd7e-c96d-4ae4-a29b-9b5bb5d24ebd"),
                             AllowedContentType = "application/pdf,application/msword,application/vnd.ms-excel,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9051),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2710),
                             DocumentCategoryId = new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
                             IsActive = true,
                             IsMandatory = false,
@@ -1115,7 +1115,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("a1a190ba-c4a8-432f-b26d-1231ca1d44bc"),
                             AllowedContentType = "application/pdf,application/msword,application/vnd.ms-excel,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9055),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2714),
                             DocumentCategoryId = new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
                             IsActive = true,
                             IsMandatory = false,
@@ -1129,7 +1129,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("07ca7182-9ac0-4407-b988-59901170cb86"),
                             AllowedContentType = "application/pdf,application/msword,application/vnd.ms-excel,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9059),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2718),
                             DocumentCategoryId = new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
                             IsActive = true,
                             IsMandatory = false,
@@ -1143,7 +1143,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("846e89a9-5735-45ec-a21d-c97f85a94ada"),
                             AllowedContentType = "application/pdf,application/msword,application/vnd.ms-excel,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9063),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2722),
                             DocumentCategoryId = new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
                             IsActive = true,
                             IsMandatory = false,
@@ -1157,7 +1157,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("7cc41c91-23cb-442b-badd-f932138d149f"),
                             AllowedContentType = "application/pdf,application/msword,application/vnd.ms-excel,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9068),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2727),
                             DocumentCategoryId = new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
                             IsActive = true,
                             IsMandatory = false,
@@ -1171,7 +1171,7 @@ namespace Marco.Pms.DataAccess.Migrations
                         {
                             Id = new Guid("5668de00-5d84-47f7-b9b5-7fefd1219f05"),
                             AllowedContentType = "application/pdf,image/vnd.dwg,application/acad",
-                            CreatedAt = new DateTime(2025, 8, 28, 11, 18, 55, 873, DateTimeKind.Utc).AddTicks(9072),
+                            CreatedAt = new DateTime(2025, 8, 30, 4, 55, 10, 359, DateTimeKind.Utc).AddTicks(2731),
                             DocumentCategoryId = new Guid("cfbff269-072b-477a-b48b-72cdc57dd1d3"),
                             IsActive = true,
                             IsMandatory = false,
@@ -1586,6 +1586,14 @@ namespace Marco.Pms.DataAccess.Migrations
                             Name = "Delete Document"
                         },
                         new
+                        {
+                            Id = new Guid("404373d0-860f-490e-a575-1c086ffbce1d"),
+                            Description = "Grants a user the authority to download the document",
+                            FeatureId = new Guid("a8cf4331-8f04-4961-8360-a3f7c3cc7462"),
+                            IsEnabled = true,
+                            Name = "Download Document"
+                        },
+                        new
                         {
                             Id = new Guid("13a1f30f-38d1-41bf-8e7a-b75189aab8e0"),
                             Description = "Grants a user the authority to verify the document",

Marco.Pms.Model/Entitlements/PermissionsMaster.cs

@@ -44,6 +44,7 @@
         public static readonly Guid UploadDocument = Guid.Parse("3f6d1f67-6fa5-4b7c-b17b-018d4fe4aab8");
         public static readonly Guid MofifyDocument = Guid.Parse("c423fd81-6273-4b9d-bb5e-76a0fb343833");
         public static readonly Guid DeleteDocument = Guid.Parse("40863a13-5a66-469d-9b48-135bc5dbf486");
+        public static readonly Guid DownloadDocument = Guid.Parse("404373d0-860f-490e-a575-1c086ffbce1d");
         public static readonly Guid VerifyDocument = Guid.Parse("13a1f30f-38d1-41bf-8e7a-b75189aab8e0");
     }
 }

Marco.Pms.Services/Controllers/DocumentController.cs

@@ -464,7 +464,14 @@ namespace Marco.Pms.Services.Controllers
                 _logger.LogWarning($"Version mapping not found for attachment ID: {id}");
                 return NotFound(ApiResponse<object>.ErrorResponse("Version not found", "Version not found in database", 404));
             }
-
+            var _permission = scope.ServiceProvider.GetRequiredService<PermissionServices>();
+            var hasDownloadPermission = await _permission.HasPermission(PermissionsMaster.DownloadDocument, loggedInEmployee.Id);
+            if (!hasDownloadPermission && loggedInEmployee.Id != versionMapping.ChildAttachment.EntityId)
+            {
+                _logger.LogWarning("Access Denied for Employee {EmployeeId} on EntityId {EntityId} for downloading",
+                    loggedInEmployee.Id, versionMapping.ChildAttachment.EntityId);
+                return StatusCode(403, ApiResponse<object>.ErrorResponse("Access Denied.", "You do not have permission to download documents", 403));
+            }
             var s3Service = scope.ServiceProvider.GetRequiredService<S3UploadService>();
             // Resolve S3UploadService from the scope to generate pre-signed URL
             var preSignedUrl = s3Service.GeneratePreSignedUrl(versionMapping.ChildAttachment.Document.S3Key);