Add API grantPermissions, storing collection in BaasBoxDocument