add privacy for documents

+ basic permission for accounts