KRACOEUS-6294	: document access table and maintenance artifacts
KRACOEUS-6294	: document access authorization changes (derived role, changes to KcAuthorizationServiceImpl to add documentNumber as a qualifier)
KRACOEUS-6294: code review comments
Merge pull request #655 from leoherbie/docperm

KRACOEUS-6294: This PR is the doc level permission code.  It does not include data conversion