narrowed access rules for locked document