test coverage for filtering batch docs by access permissions