improving documentation about object level permissions