lock single document from anauhtorized user