improve mapping + add param converter to download action
handle document-ip_restriction relationship + implement check chain + always fail ip restrictions