docman: fix create document when user has only submit permission