Document of records Read Only for Employee

We have a scenario where we have a Document of Records Category, which is linked to some DFF's. The Manager can enter details in the DFF's and upload a DoR, through Manager Self-Service. We would like the Employee to be able to review the DFF answers through Employee Self-Service and not be able amend the answers or DoR.

There are several seeded document types meaning a shared Application Function. We only want to make one specific DoR Category read-only and for the Employee, not all document types.

Any thoughts?