insert grant/revoke API in document's section