KRACOEUS-6294: This PR is the doc level permission code.  It does not include data conversion

As much as possible we want all simple properties to use the shorter p: syntax.