improving documentation about object level permissions #1049