document management permission