add document authorization