doc access control