Document permission API resource